Information Security Risk Manager

Job Summary

Supporting and advancing information security governance, the full-time Information Security Risk Manager will lead ISO 27001 compliance activities, conduct risk assessments, and collaborate with various stakeholders to manage and communicate information security risks in a remote environment.

Key responsibilities

• Lead ISO 27001 certification and internal audit readiness, ensuring ongoing compliance activities
• Coordinate risk assessments and control evaluations across business units to identify and address security gaps
• Manage audit activities related to information security, cybersecurity, and integrated technology controls

Required qualifications

• 5+ years of experience in information security risk, governance, compliance, or technology audit
• ISO 27001 Lead Implementer or Lead Auditor training, or relevant certifications such as CISA, CISM, or CISSP
• Strong understanding of security and control frameworks, including ISO 27001, SOC 2, and NIST
• Experience with enterprise workflow and security technologies, with familiarity in ServiceNow and Jira preferred
• Demonstrated knowledge of technology risks and cybersecurity processes, including vulnerability management and incident response