Senior Information Security Compliance Lead
Core
Leading enterprise-wide cybersecurity compliance, governance, and assurance programs to ensure regulatory, contractual, and industry compliance requirements are effectively implemented and monitored.
Role type
Senior Information Security Compliance Lead (GRC)
Builds
Enterprise security compliance frameworks, audit readiness, and governance metrics
Domain
Information Security / Cybersecurity Governance
Required skills
ISO/IEC 27001 Lead Auditor, CISA, CISSP, SOC 2 Auditor, CMMC Certified Professional, CMMC Certified Assessor, Risk Management, Third-Party Risk Management, Security Governance, Policy Management, Audit Management, Executive Presentation
Preferred skills
CISA, CISSP, SOC 2 Auditor, CMMC Certified Professional, CMMC Certified Assessor
Technologies
ISO/IEC 27001:2022, SOC 2 Trust Services Criteria, CMMC 2.0, NIST 800-171, NIST Cybersecurity Framework
Responsibilities
Lead enterprise cybersecurity compliance programs including ISO 27001, SOC 2 Type II, and CMMC; Develop and maintain information security policies, standards, and control frameworks; Perform gap assessments, risk assessments, and control maturity evaluations; Lead external certification audits and manage third-party assessors; Partner with Legal, Privacy, Internal Audit, and business stakeholders to ensure compliance; Present compliance status, risks, and audit results to senior leadership.
Seniority
Senior, hands-on IC