GRC Security Engineer - ISO 27001, Risk & Compliance

Alan; Gallipolis (OH); On-site; USD 140,000 - 190,000; Full time

Job summary

Alan is seeking a Governance, Risk & Compliance lead to own the ISO 27001 ISMS, manage audits and regulatory relationships. You will translate complex regulations (DORA, HDS, RGPD) into actionable security controls and drive risk management across the organization.

You’ll partner with Legal, Internal Audit, and Risk teams, manage third-party security, and ensure security posture aligns with business objectives in a highly collaborative environment.

Qualifications

• Experience leading ISO 27001 ISMS certification cycles.
• Strong understanding of DORA, RGPD, and privacy regulations.
• Ability to translate regulatory requirements into concrete controls.
• Collaboration with Legal, Internal Audit, and Risk teams.

Responsibilities

• Own and operate the ISMS scope, SoA, audits and management review.
• Lead security governance, risk assessment and treatment plans.
• Coordinate with Compliance, Legal, and Internal Audit.
• Manage third-party security risk and vendor security requirements.

Skills

ISMS governance

Regulatory knowledge

Risk management

Internal Audit liaison

Vendor security

Tools

EBIOS RM

ISO 27001

Job description

Alan is seeking a Governance, Risk & Compliance lead to own the ISO 27001 ISMS, manage audits and regulatory relationships. You will translate complex regulations (DORA, HDS, RGPD) into actionable security controls and drive risk management across the organization.

You’ll partner with Legal, Internal Audit, and Risk teams, manage third-party security, and ensure security posture aligns with business objectives in a highly collaborative environment.