ISO 27001 Implementation Lead

COX-LITTLE & COMPANY; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

COX-LITTLE & COMPANY is seeking an experienced ISO 27001 security and compliance professional to lead program-wide initiatives across IT and business functions. The role focuses on implementing ISO 27001, maintaining the Statement of Applicability, and ensuring audit readiness for Stage 1 and Stage 2 certifications.

Candidates with expertise in manufacturing/OT environments, ERP systems, and ServiceNow CMDB are encouraged, as well as familiarity with ITGC/SOX and supplier security.

Qualifications

• ISO 27001 implementation and audit-readiness experience.
• Strong knowledge of risk treatment, SoA, Annex A controls, evidence management, internal audit and corrective actions.
• Experience supporting ISO 27001 Stage 1 and Stage 2 certification activities.
• Ability to lead cross-functional efforts involving IT, business functions, control owners, consultants and certification bodies.
• Multi-site security/compliance program leadership experience.
• Manufacturing/OT, ERP, ServiceNow CMDB, access governance, supplier security, ITGC/SOX, TISAX and quality-management experience is advantageous.

Skills

ISO 27001 implementation

Audit readiness

Risk treatment

Statement of Applicability

Annex A controls

Evidence management

Internal audit

Corrective actions

Cross-functional leadership

Multi-site security

Tools

ServiceNow CMDB

Job description

• Demonstrated ISO 27001 implementation and audit-readiness experience
• Strong knowledge of risk treatment, Statement of Applicability, Annex A controls, evidence management, internal audit, and corrective actions
• Experience supporting ISO 27001 Stage 1 and Stage 2 certification activities
• Ability to lead cross-functional efforts involving IT, business functions, operational control owners, consultants, and certification bodies
• Multi-site security/compliance program leadership experience
• Manufacturing/OT, ERP, ServiceNow CMDB, access governance, supplier security, ITGC/SOX, TISAX, and quality-management experience is advantageous