Information Security Compliance Program Lead

Lumel; Fort Worth, Arlington, Dallas (TX, TX, TX); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Competitive benefits

Career advancement opportunities

Job summary

A leading data analytics firm is looking for an Information Security – Compliance Program Manager. This career-growth position is responsible for owning the compliance program, leading SOС 2, ISO 27001, GDPR, and HIPAA certification initiatives. The ideal candidate has over 5 years of experience in information security compliance and the ability to manage external auditors and stakeholders effectively. The role is based 100% onsite in the Dallas–Fort Worth area and offers competitive compensation with opportunities for career advancement.

Qualifications

• 5+ years of progressive experience in Information Security Compliance / GRC / Risk & Assurance.
• Prior experience with Big 4 or equivalent large‑scale compliance environments.
• Proven track record leading SOC 2, ISO 27001, GDPR, HIPAA certifications end‑to‑end.
• Deep understanding of information security frameworks, audit methodologies, and control testing.
• Strong experience managing external auditors, vendors, and certification bodies.
• Excellent stakeholder management and executive communication skills.
• Highly organized, independent self‑starter with strong ownership mindset.

Responsibilities

• Own the end‑to‑end Information Security Compliance Program.
• Lead and manage SOC 2 Type II, ISO 27001, GDPR, HIPAA, and upcoming certification initiatives.
• Develop certification roadmaps, readiness assessments, risk registers, control matrices, and compliance artifacts.
• Serve as primary liaison with external auditors, certification bodies, and compliance vendors.
• Drive gap analysis, remediation plans, and continuous improvement programs.
• Coordinate across multiple departments to ensure controls are implemented and sustained.
• Establish internal security policies, procedures, governance frameworks, and evidence‑collection processes.
• Conduct internal audits, control testing, vendor risk assessments, and compliance training.
• Build audit‑ready documentation repositories and compliance dashboards.
• Track regulatory changes and proactively update the compliance posture.
• Report compliance status, risks, and audit outcomes to senior leadership.

Skills

CISA

CISM

CRISC

CISSP

ISO 27001 Lead Implementer/Lead Auditor

Job description

A leading data analytics firm is looking for an Information Security – Compliance Program Manager. This career-growth position is responsible for owning the compliance program, leading SOС 2, ISO 27001, GDPR, and HIPAA certification initiatives. The ideal candidate has over 5 years of experience in information security compliance and the ability to manage external auditors and stakeholders effectively. The role is based 100% onsite in the Dallas–Fort Worth area and offers competitive compensation with opportunities for career advancement.