Senior Conformity Assessment Program Specialist - Information Security Management System

UL, LLC; Carugate; Ibrido; EUR 55.000 - 75.000; Tempo pieno

Vantaggi offerti da questo lavoro

Annual paid leave

ULS University for learning

Volunteering days

Flexible working arrangements

Descrizione del lavoro

UL Solutions is seeking a Senior ISO/IEC 27001 + TISAX Compliance Specialist to develop, implement, and maintain ISMS conformance across units. You will collaborate with ISMS managers and global teams to ensure controls meet requirements and address risks and regulatory obligations.

The role demands 5+ years in information security, strong risk management skills, and English fluency, with ISO/IEC 27001 and TISAX experience.

Competenze

• Bachelor’s or Master’s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field.
• Minimum 5 years of experience in information security, IT compliance, or risk management roles, preferably in TIC.
• Proven experience implementing and maintaining ISO/IEC 27001 and TISAX-conformant ISMS.
• Preferred certifications: ISO/IEC 27001 Lead Implementer or TISAX Lead Implementer.
• Fluency in English.

Mansioni

• Develop, implement and maintain ISO/IEC 27001 and TISAX conformance/compliance requirements.
• Collaborate with ISMS managers to ensure local conformance with ISO/IEC 27001 and TISAX obligations.
• Advise cross-functional teams on ISMS control requirements and solutions.
• Support risk assessments and treatment across locations to ensure consistent approach.
• Stay current with changes in ISO/IEC 27001, TISAX and relevant frameworks.
• Assist in resolving corrective actions and drive continuous improvement.

Conoscenze

Information security

Risk management

Stakeholder communication

ISO/IEC 27001 experience

TISAX awareness

Formazione

Bachelor’s or Master’s degree in Information Security or related field

Strumenti

Risk registers

Threat modeling

Descrizione del lavoro

The Senior ISO/IEC 27001 + TISAX Compliance Specialist is responsible for developing, implementing, and maintaining the organization’s Information Security Management Systems (ISMS) global conformance/compliance requirements to ensure alignment with ISO/IEC 27001 and TISAX requirements across multiple business/customer operating units.

This role ensures conformance/compliance with the requirements, supports the management of information security risks, and support of the culture of information and cybersecurity security awareness across the organization where ISO/IEC 27001 /TISAX conformance/compliance is required.

• Develop and maintain global ISO/IEC 27001 and TISAX conformance/compliance requirements documentation in support of local UL Solutions Statements of Applicability (SoAs), information security policies, procedures, processes, and controls.

• Collaborate with ISMS Managers to ensure local conformance/compliance with ISO/IEC 27001 and TISAX requirements, including legal, regulatory, and contractual obligations.

• Partner with Global Technology, Global Cybersecurity, and other key functional teams (e.g., Legal, Business Continuity) to advise on applicable ISMS control requirements and potential solutions to address ISO/IEC 27001 and TISAX conformance/compliance issues.

• Support locations in conducting information security risk assessments and treatment, providing advice and guidance to ensure a consistent and aligned approach across the organization.

• Support the development of global processes that enable conformance/compliance with ISO/IEC 27001 and TISAX requirements.

• Support continuous improvement initiatives led by ISMS Managers.

• Assist in resolving corrective actions managed by ISMS Managers, leveraging prior experience in managing corrective actions to provide effective support.

• Stay current with changes in ISO/IEC 27001, TISAX, and other relevant best practice standards and regulatory frameworks.

• Bachelor’s or Master’s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field.

• Minimum 5 years of experience in information security, IT compliance, or risk management roles, preferably within a TIC (Testing, Inspection, Certification) organization.

• Proven experience in implementing and maintaining ISO/IEC 27001 and TISAX-conformant/compliant ISMS.

• Preferred certifications: ISO/IEC 27001 or TISAX Lead Implementer.

• Strong understanding of and experience with risk management methodologies, processes, and tools (e.g., risk registers, threat modeling).

• Demonstrated experience supporting ISO/IEC 27001/TISAX implementations, including contributing to the resolution of corrective actions and supporting continuous improvement initiatives led by ISMS Managers.

• Excellent analytical, organizational, and project management skills.

• Strong interpersonal, networking and communication skills, with the ability to influence internal and external stakeholders at all levels.

• Fluency in English required.

What we offer:

Total Rewards: We understand that rewards are an important consideration as you plan the next step in your career. Salary range varies by location and local market conditions and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, and other factors.

For Poland only: the annual salary range for this position starts from 193,000 PLN gross. For Italy Only: the annual salary range for this position starts from €55,000 gross (CBA level 2).

This position is eligible for additional incentive with a target payout of 10% of base salary. You’ll also enjoy annual paid leave, access to our ULS University to support continuous learning and career growth, two volunteering days each year to participate in community activities, and flexible working arrangements designed to help you balance work and life.

Disclaimer: This role is gender-neutral and open to all qualified applicants, regardless of gender identity or expression.

What you’ll experience working for ULS:

UL Solutions has been pioneering change since 1894 and we’re still leading the way. From day one, we’ve blazed a trail protecting the planet and everyone on it. Our teams have influenced billions of products, plus services, software offerings and more. We break things, burn things and blow things up. All in the name of safety science. That’s where you come in — because none of it could happen without you. It takes passion to protect people, problem-solving to safeguard personal data and conviction to make the world a more sustainable place. It takes bold ideas and brilliant minds to build a better world for future generations across the globe. This is more than a job. It’s a calling. A passion to use our expertise and play our part in creating a more secure, sustainable world today — and tomorrow. As a member of our safety science community, you’ll use your ideas, your energy and your ambition to innovate, challenge and ultimately, help create a safer world. Everyone here is unique. But we’re also a global community, working together to help create a safer world. Join UL Solutions and you can connect with the brightest minds in the business, all bringing their distinct perspectives and diverse backgrounds together to deliver real change. Empowering our customers to keep the world safe means thinking ahead. It means investing in training and empowering our people to learn and innovate. At UL Solutions, we help build a better future — one where everyone benefits.

Join UL Solutions to be at the center of safety. To learn more about us and the work we do, visit https://www.ul.com/industries/energy-and-utilities/renewables

#LI-Hybrid

#LI-VP1

UL LLC has been and will continue to be an equal opportunity employer. To assure full implementation of this equal employment policy, we will take steps to assure that:

Persons are recruited, hired, assigned and promoted without regard to race, color, age, sex or gender, sexual orientation, gender identity, gender expression, transgender status, religion, creed, national origin, ethnicity, citizenship, ancestry, disability, genetic information, military or veteran status, pregnancy, marital or familial status, or any other protected category under applicable law.