Senior Conformity Assessment Program Specialist - Information Security Management System

UL Solutions; Carugate; In loco; EUR 55.000 - 75.000; Tempo pieno

Vantaggi offerti da questo lavoro

Annual paid leave

ULS University

Volunteer days

Flexible working

Descrizione del lavoro

UL Solutions in Italy seeks a Senior ISO/IEC 27001 + TISAX Compliance Specialist to develop, implement, and maintain the ISMS framework across our operations. You will ensure alignment with ISO/IEC 27001 and TISAX requirements and support risk management and security awareness across the organization.

You will collaborate with Global Technology, Legal, and other teams to address conformance issues, support risk assessments, drive continuous improvement, and stay current with evolving standards.

Competenze

• Bachelor’s or Master’s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field.
• Minimum 5 years of experience in information security, IT compliance, or risk management roles, preferably within a TIC (Testing, Inspection, Certification) organization.
• Proven experience in implementing and maintaining ISO/IEC 27001 and TISAX-conformant/compliant ISMS.
• Preferred certifications: ISO/IEC 27001 or TISAX Lead Implementer.
• Strong understanding of risk management methodologies, processes, and tools.

Mansioni

• Develop and maintain global ISO/IEC 27001 and TISAX conformance/compliance requirements documentation in support of local UL Solutions SoAs, information security policies, procedures, processes, and controls.
• Collaborate with ISMS Managers to ensure local conformance/compliance with ISO/IEC 27001 and TISAX requirements, including legal, regulatory, and contractual obligations.
• Partner with Global Technology, Global Cybersecurity, and other key functional teams to advise on ISMS control requirements and potential solutions.
• Support locations in conducting information security risk assessments and treatment, providing guidance to ensure a consistent approach.
• Support the development of global processes enabling conformance/compliance with ISO/IEC 27001 and TISAX requirements.
• Support continuous improvement initiatives led by ISMS Managers.
• Assist in resolving corrective actions managed by ISMS Managers.
• Stay current with changes in ISO/IEC 27001, TISAX, and related standards.

Conoscenze

ISO27001 knowledge

TISAX knowledge

ISMS implementation

Risk management

Stakeholder communication

English fluency

Formazione

Information Security

Descrizione del lavoro

Job Description

Senior ISO/IEC 27001 + TISAX Compliance Specialist is responsible for developing, implementing, and maintaining the organization’s Information Security Management Systems (ISMS) global conformance/compliance requirements to ensure alignment with ISO/IEC 27001 and TISAX requirements across multiple business/customer operating units.

This role ensures conformance/compliance with the requirements, supports the management of information security risks, and support of the culture of information and cybersecurity security awareness across the organization where ISO/IEC 27001 /TISAX conformance/compliance is required.

Responsibilities

• Develop and maintain global ISO/IEC 27001 and TISAX conformance/compliance requirements documentation in support of local UL Solutions Statements of Applicability (SoAs), information security policies, procedures, processes, and controls.
• Collaborate with ISMS Managers to ensure local conformance/compliance with ISO/IEC 27001 and TISAX requirements, including legal, regulatory, and contractual obligations.
• Partner with Global Technology, Global Cybersecurity, and other key functional teams (e.g., Legal, Business Continuity) to advise on applicable ISMS control requirements and potential solutions to address ISO/IEC 27001 and TISAX conformance/compliance issues.
• Support locations in conducting information security risk assessments and treatment, providing advice and guidance to ensure a consistent and aligned approach across the organization.
• Support the development of global processes that enable conformance/compliance with ISO/IEC 27001 and TISAX requirements.
• Support continuous improvement initiatives led by ISMS Managers.
• Assist in resolving corrective actions managed by ISMS Managers, leveraging prior experience in managing corrective actions to provide effective support.
• Stay current with changes in ISO/IEC 27001, TISAX, and other relevant best practice standards and regulatory frameworks.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field.
• Minimum 5 years of experience in information security, IT compliance, or risk management roles, preferably within a TIC (Testing, Inspection, Certification) organization.
• Proven experience in implementing and maintaining ISO/IEC 27001 and TISAX-conformant/compliant ISMS.
• Preferred certifications: ISO/IEC 27001 or TISAX Lead Implementer.
• Strong understanding of and experience with risk management methodologies, processes, and tools (e.g., risk registers, threat modeling).
• Demonstrated experience supporting ISO/IEC 27001/TISAX implementations, including contributing to the resolution of corrective actions and supporting continuous improvement initiatives led by ISMS Managers.
• Excellent analytical, organizational, and project management skills.
• Strong interpersonal, networking and communication skills, with the ability to influence internal and external stakeholders at all levels.
• Fluency in English required.

What we offer

Total Rewards: We understand that rewards are an important consideration as you plan the next step in your career. Salary range varies by location and local market conditions and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, and other factors.

For Poland only: the annual salary range for this position starts from 193,000 PLN gross. For Italy Only: the annual salary range for this position starts from €55,000 gross (CBA level 2).

This position is eligible for additional incentive with a target payout of 10% of base salary. You’ll also enjoy annual paid leave, access to our ULS University to support continuous learning and career growth, two volunteering days each year to participate in community activities, and flexible working arrangements designed to help you balance work and life.

Disclaimer: This role is gender-neutral and open to all qualified applicants, regardless of gender identity or expression.

What you’ll experience working for ULS

UL Solutions has been pioneering change since 1894 and we’re still leading the way. From day one, we’ve blazed a trail protecting the planet and everyone on it. Our teams have influenced billions of products, plus services, software offerings and more. We break things, burn things and blow things up. All in the name of safety science. That’s where you come in — because none of it could happen without you. It takes passion to protect people, problem-solving to safeguard personal data and conviction to make the world a more sustainable place. It takes bold ideas and brilliant minds to build a better world for future generations across the globe. This is more than a job. It’s a calling. A passion to use our expertise and play our part in creating a more secure, sustainable world today — and tomorrow. As a member of our safety science community, you’ll use your ideas, your energy and your ambition to innovate, challenge and ultimately, help create a safer world. Everyone here is unique. But we’re also a global community, working together to help create a safer world. Join UL Solutions and you can connect with the brightest minds in the business, all bringing their distinct perspectives and diverse backgrounds together to deliver real change. Empowering our customers to keep the world safe means thinking ahead. It means investing in training and empowering our people to learn and innovate. At UL Solutions, we help build a better future — one where everyone benefits.

Join UL Solutions to be at the center of safety. To learn more about us and the work we do, visit https://www.ul.com/industries/energy-and-utilities/renewables