Senior Compliance Analyst

Job Summary

Leading the implementation and ongoing maintenance of the ISO/IEC 27001:2022 program, the full-time remote Senior Compliance Analyst will serve as the primary subject matter expert, collaborating with cross-functional teams to manage compliance activities, coordinate certification audits, and enhance the Information Security Management System (ISMS).

Key Responsibilities

• Lead the end-to-end implementation and certification of the ISO/IEC 27001:2022 program, including gap assessments and remediation activities
• Conduct and maintain information security risk assessments and coordinate internal audits and corrective actions
• Develop and maintain information security policies and documentation, ensuring compliance and audit readiness

Required Qualifications

• 5+ years of experience in governance, risk and compliance (GRC) or information security compliance
• Demonstrated experience leading ISO/IEC 27001 implementation and certification efforts
• Strong knowledge of ISO/IEC 27001:2022 requirements and risk assessment processes
• Experience preparing for and coordinating external certification audits
• ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or comparable certification