Policy and Compliance Lead

Job Summary

To support a growing corporate information security team, the full-time Policy and Compliance Lead will develop and implement policies and standards aligned with regulatory requirements while working remotely.

Key responsibilities

• Design, develop, and maintain comprehensive information security policies, standards, and procedures
• Lead compliance initiatives and assessments, ensuring adherence to applicable laws and regulations
• Serve as a subject matter expert, providing guidance on policy interpretation and risk mitigation strategies

Required qualifications

• Strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, and SOC 2
• Demonstrated ability to translate complex technical and regulatory requirements into clear policies
• Proven experience in preparing for and managing IT security audits
• 3+ years of experience in information security, risk management, compliance, or policy development
• Strong knowledge of compliance frameworks and ability to translate requirements into actionable controls