ISO 27001 Compliance Director

Job Summary

Owning the controls framework and compliance automation, the full-time ISO 27001 Compliance Director will design and implement a unified controls library, manage the GRC platform, and execute control testing programs while working remotely.

Key responsibilities

• Design and build the unified controls framework, mapping to ISO 27001, SOC 2, NIST CSF, and SOX ITGC
• Lead the implementation of ISO 27001:2022 controls and execute the control testing program across all in-scope frameworks
• Oversee GRC platform selection, implementation, and administration, ensuring integration with operational systems

Required qualifications

• 8-12+ years of experience in GRC, IT audit, controls design, or compliance program management
• ISO 27001 Lead Implementer or Lead Auditor certification is required
• Experience designing a controls framework mapped to multiple standards (SOC 2, ISO 27001, NIST CSF, SOX ITGC)
• Hands-on experience with GRC platform administration and control testing programs
• Technical fluency with AWS and Azure security configurations and familiarity with automation and integration processes