Policy and Compliance Lead

Job Summary

To support corporate information security initiatives, the full-time remote Policy and Compliance Lead will develop and implement policies and standards aligned with regulatory requirements while leading compliance assessments and serving as a subject matter expert for business units.

Key responsibilities

• Design, develop, and maintain comprehensive information security policies and procedures that align with industry frameworks and regulatory requirements
• Lead compliance initiatives, coordinating with cross-functional teams to ensure adherence to laws, regulations, and contractual obligations
• Drive continuous improvement of the policy management lifecycle, including stakeholder engagement and metrics reporting to leadership

Required qualifications

• Strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, and SOC 2
• Proven experience in preparing for and managing IT security audits
• 3+ years of experience in information security, risk management, compliance, or policy development within a corporate environment
• Demonstrated ability to translate complex technical and regulatory requirements into clear, actionable policies
• Strong knowledge of compliance frameworks and ability to translate requirements into actionable controls