ISO 27001 Cyber Risk & Compliance Lead

Jobright.ai; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive benefits starting day one

Job summary

Softchoice, a software-focused IT solutions provider in Chicago, seeks a Cybersecurity Risk Manager to identify, assess, and mitigate risks while building a robust risk program. You’ll lead risk governance, align with ISO 27001, guide audits, and drive remediation with cross-functional teams.

The role requires 10–15 years in IT security, hands-on governance, and strong leadership. You will report to senior leadership and shape enterprise-wide cybersecurity posture through proactive risk

Qualifications

• 10-15 years' IT experience including security operations (SOC).
• 5 years experience managing people directly and indirectly.
• At least 5 years in cybersecurity governance, risk, and compliance (GRC).
• Knowledge of risk management in cybersecurity, IT compliance, risk assessment, and control.
• Understanding of security practices, trends, and compliance audits.
• Auditing against information security management frameworks (SOC 2 Type 2, ISO 27001:2022).
• Proven project management approach to drive outcomes.

Responsibilities

• Take ownership for maturing our Risk Management governance/process and coordinate remediation.
• Set strategic direction for cybersecurity risk management and related compliance initiatives.
• Develop and maintain a cybersecurity risk framework aligned with ISO 27001.
• Establish governance structures to oversee risk and compliance activities.
• Guide the organization through audits and engagements with auditors.
• Oversee risk assessments to define and analyze risks with a comprehensive approach.
• Evaluate risk gravity by considering potential organizational impact.
• Develop, prioritize, and lead execution of risk treatment plans and controls.
• Monitor evidence-based implementation of controls to achieve compliance.
• Drive process changes to mitigate potential risks and conduct access reviews.
• Present risk score updates for ISMS committee and leadership review.
• Define contingency plans and incident response playbooks for cyber crises.
• Identify gaps in policies and drive adoption of improved cybersecurity policies.
• Enhance employees' understanding of cybersecurity risks and best practices.
• Provide strategic direction and mentorship to cross-functional teams.

Skills

Cybersecurity governance

Risk management

ISO 27001

Compliance audits

Security operations

Project management

Analytical skills

Research skills

Risk assessment

Policy development

Incident response

Employee training

Statistical Analysis Software

CISSP certification

CISM certification

CISA certification

CRISC certification

Professional Risk Manager

Leadership

Communication skills

Problem-solving

Team collaboration

Technical writing

Education

Bachelor's or master's degree in computer science, engineering, information security, or a related field

Tools

Statistical Analysis Software (SAS)

Job description

Softchoice, a software-focused IT solutions provider in Chicago, seeks a Cybersecurity Risk Manager to identify, assess, and mitigate risks while building a robust risk program. You’ll lead risk governance, align with ISO 27001, guide audits, and drive remediation with cross-functional teams.

The role requires 10–15 years in IT security, hands-on governance, and strong leadership. You will report to senior leadership and shape enterprise-wide cybersecurity posture through proactive risk