ISMS & Security Compliance Lead (ISO 27001)

Ampere; Portland (OR); On-site; USD 182,000 - 273,000; Full time

Benefits offered by this job

Health insurance

401K retirement plan

Unlimited flextime

Job summary

Ampere is seeking a Security Compliance Specialist to mature our ISMS and lead day-to-day compliance operations. You will partner with Engineering, IT, Legal, and HR to implement and maintain ISO 27001 controls, manage risk assessments, and coordinate audits with internal and external stakeholders.

You will also drive TPRM efforts, respond to customer security questionnaires, and map controls to NIST frameworks while ensuring proper documentation and evidence across the organization.

Qualifications

• Bachelor’s degree or higher in information security, CS, IS, or equivalent.
• 8+ years in information security compliance, IT audit, or risk management.
• Hands-on ISO 27001 implementation and maintenance experience.

Responsibilities

• Own ISMS scoping, risk assessments, SoA, and audit readiness.
• Design, test, and evidence collection for controls across IT and Engineering.
• Maintain audit evidence repository and respond to customer security questionnaires.
• Collaborate with cross-functional teams to embed security controls in IT and product environments.
• Lead TPRM assessments and manage vendor risk initiatives.
• Provide guidance mapping controls to NIST; align with ISO 27001 and SOX ITGC as needed.
• Track remediation actions and governance through Jira.

Skills

ISO 27001

NIST CSF/SP 800-53

TPRM & Customer Assurance

Audit & evidence collection

Jira & Confluence

Education

Bachelor’s degree in Information Security / CS / IS

Tools

Jira

Confluence

Workiva

Drata

Vanta

Job description

Ampere is seeking a Security Compliance Specialist to mature our ISMS and lead day-to-day compliance operations. You will partner with Engineering, IT, Legal, and HR to implement and maintain ISO 27001 controls, manage risk assessments, and coordinate audits with internal and external stakeholders.

You will also drive TPRM efforts, respond to customer security questionnaires, and map controls to NIST frameworks while ensuring proper documentation and evidence across the organization.