ISO 27001 ISMS Lead - Compliance & Audit Readiness

Accela; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Accela is seeking a Senior Compliance Analyst to lead ISO/IEC 27001:2022 program implementation, certification, and ongoing ISMS maintenance. This role partners with Security, IT, Engineering, Legal, and HR to drive controls, evidence, and audit readiness.

Ideal candidates bring hands-on ISO 27001 experience, strong project management, and the ability to drive cross-functional initiatives while supporting broader GRC objectives.

Qualifications

• 5+ years in GRC, info security compliance, or related field.
• Demonstrated ISO/IEC 27001 implementation and certification expertise.
• Strong knowledge of ISO/IEC 27001:2022, ISMS operations and risk management.
• Experience coordinating external certification audits and remediation.
• Experience developing and maintaining compliance policies and controls.
• Hands-on experience with a GRC automation platform (Drata or equivalent).
• Excellent project, analytical, and stakeholder management skills; strong communication.

Responsibilities

• Lead end-to-end ISO 27001 implementation and certification.
• Develop implementation plans, milestones, and responsibilities.
• Coordinate external audits and remediation findings.
• Maintain ISMS scope, SoA, and evidence management.
• Collaborate with cross-functional teams to operationalize ISO 27001 requirements.
• Provide regular reports on readiness and progress.

Skills

ISO 27001 implementation

GRC

Project management

Stakeholder management

Audit coordination

Risk assessment

Policy development

Tools

Drata

Job description

Accela is seeking a Senior Compliance Analyst to lead ISO/IEC 27001:2022 program implementation, certification, and ongoing ISMS maintenance. This role partners with Security, IT, Engineering, Legal, and HR to drive controls, evidence, and audit readiness.

Ideal candidates bring hands-on ISO 27001 experience, strong project management, and the ability to drive cross-functional initiatives while supporting broader GRC objectives.