Description

You will lead the security and compliance program lifecycle.

Responsibilities

• Establish and mature the enterprise GRC program aligned to ISO 27001, SOX, NIST CSF, CIS Controls, and regulatory needs.
• Own the ISMS lifecycle, including scope definition, risk assessment, Statement of Applicability, and readiness for surveillance/recertification.
• Define and maintain security policies, standards, and procedures across areas like access control and change management.
• Lead the ISO 27001 certification journey, managing gap analysis, control implementation, and external auditor liaison.
• Chair and coordinate governance forums, such as the Risk & Compliance Steering Committee.

Required Skills

• 8+ years of experience implementing ISO 27001 end-to-end.
• Experience with SOX 404 ITGC ownership, covering scoping, control design, and remediation in ERPs.
• Proficiency in Risk Management practices.
• Familiarity with Security and Access control frameworks.
• Experience with ERP systems like SAP and Oracle.
• Knowledge of Statement of Applicability (SoA) creation.
• Experience navigating compliance requirements related to Security.

Key Skills

Education

Any Gradute