About the Role
You will lead technology risk assessments and security compliance activities. You will coordinate internal and external audits, maintain ISO and SOC 2 certifications, run global security-awareness training, automate evidence collection, assess controls and risks, manage remediation, and maintain compliance frameworks across jurisdictions.
Requirements
•2–5 years of experience in information security, privacy, IT audit, or IT risk management
•Experience conducting internal or external IT audits
•Knowledge of ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, PCI-DSS, SOX, cloud technologies, and data protection
•Experience running compliance training programs and reporting for a global workforce
•Experience working with external auditors or regulators
Responsibilities
•Coordinate and perform annual internal and external IT audits for ISO and SOC 2 certifications
•Run global security awareness and compliance training campaigns
•Automate evidence collection and compliance workflows
•Participate in security, privacy, audit, certification, and risk-management activities
•Respond accurately to internal and third-party security-compliance enquiries
•Perform technical, organizational, and third-party risk and control assessments and manage remediation
•Design and maintain control frameworks for international standards and local regulations
•Drive process improvements for global security compliance operations
