ISO 27001 Governance Director

Job Summary

To build and own the ISO 27001:2022 documentation framework, the full-time remote ISO 27001 Governance Director will manage the governance model, regulatory horizon scanning, and Contracts Management program while ensuring compliance and risk management across the organization.

Key responsibilities

• Build and manage the ISO 27001:2022 documentation framework and policy library
• Oversee the regulatory horizon scanning program and translate regulatory signals into actionable GRC program actions
• Establish and operate the Contracts Management program in collaboration with the Legal team

Required qualifications

• 8-12+ years of experience in GRC, policy management, or regulatory affairs at a publicly traded or highly regulated company
• ISO 27001 Lead Implementer certification is required
• Experience building a policy library and governance model from a minimal baseline
• Knowledge of Third-Party Risk Management frameworks and vendor risk program design
• Proven capability in regulatory horizon scanning across critical infrastructure and data privacy