ISO 27001 Compliance Lead — ISMS & Audit Expert

Accela; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Flexible time off

Medical/Dental/Vision insurance

401(k) match

HSA

FSA

Life insurance

Travel insurance

Employee assistance program

Job summary

Accela seeks a seasoned information security professional to lead the ISO/IEC 27001:2022 certification program as the primary subject matter expert. You will partner across GRC, IT, Engineering, Legal, HR, and Finance to implement and maintain ISMS controls and coordinate audits with Drata.

You will manage certification readiness, external audits, and continuous improvement of the ISMS, while developing security policies and risk documentation and integrating ISO 27001 with SOC 2, GovRAMP, NIST

Qualifications

• 5+ years of GRC or information security compliance experience.
• ISO 27001 Lead Implementer, CISA, or CGRC certification.
• Strong project management and cross-functional influence without direct authority.

Responsibilities

• Lead the ISO/IEC 27001:2022 certification program and act as primary subject matter expert.
• Coordinate audits, risk assessments and evidence management via a GRC platform (Drata).
• Develop and maintain security policies, procedures and risk documentation; integrate ISO 27001 with SOC 2, GovRAMP, NIST SP 800-53, and PCI DSS.

Skills

GRC

InfoSec

Education

ISO27001 Lead Implementer

CISA

CGRC

Tools

Drata

Job description

Accela seeks a seasoned information security professional to lead the ISO/IEC 27001:2022 certification program as the primary subject matter expert. You will partner across GRC, IT, Engineering, Legal, HR, and Finance to implement and maintain ISMS controls and coordinate audits with Drata.

You will manage certification readiness, external audits, and continuous improvement of the ISMS, while developing security policies and risk documentation and integrating ISO 27001 with SOC 2, GovRAMP, NIST