ISO 27001 Compliance & Risk Specialist

Military, Veterans and Diverse Job Seekers; San Jose (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Military, Veterans and Diverse Job Seekers is seeking a Security Compliance Specialist to advance our information security program. You will maintain governance, risk management, and compliance for ISO 27001 while enhancing the security framework, controls, and audit readiness.

The role requires coordinating audits (ISO27001, ISO9001, SOX) and managing vendor risk with cross-functional teams.

Qualifications

• 5+ years in information security risk and governance.
• Bachelor's degree in risk management or information security or related discipline.
• Strong knowledge of security principles and risk management.
• Experience with ISO27001 and NIST-800.
• Excellent verbal and written communication skills to document, communicate findings, and interact with business customers.

Responsibilities

• Maintain strong governance, risk, and compliance processes for ISO 27001.
• Continuously improve the security framework, methodology, standards, and internal controls.
• Govern NCR process and ensure corrective actions are completed.
• Establish and monitor performance metrics, trending reports, and KPIs.
• Create and maintain internal governing documents for ISO27001 auditing procedures and internal controls.
• Assess information security risks, threats, vulnerabilities, and impact.
• Serve as the main contact for audits such as ISO27001, ISO9001, SOX, policy, and data privacy.
• Create, manage, and document SOPs and guidelines.
• Develop security awareness training content and deliver to employees.
• Manage third-party, supply chain, and cloud vendor risk reduction programs.
• Perform security risk assessments and identify mitigations for new projects.

Skills

Risk management

Governance

Information security

ISO27001

NIST-800

Auditing

Documentation

Security awareness

Vendor risk management

Project management

Education

Bachelor's degree in risk management

Bachelor's degree in information security

Related discipline

Job description

Military, Veterans and Diverse Job Seekers is seeking a Security Compliance Specialist to advance our information security program. You will maintain governance, risk management, and compliance for ISO 27001 while enhancing the security framework, controls, and audit readiness.

The role requires coordinating audits (ISO27001, ISO9001, SOX) and managing vendor risk with cross-functional teams.