ISO 27001 Lead - ISMS & Compliance Architect (Remote)

Accela; Oregon; Hybrid; USD 120,000 - 140,000; Full time

Job summary

Accela is seeking a Senior Compliance Analyst to lead ISO/IEC 27001:2022 implementation, certification, and ongoing ISMS maintenance. You will collaborate with Information Security, IT, Engineering, Legal, HR, and other stakeholders to implement controls, manage compliance activities, and prepare for audits.

Strong project management and hands-on ISO 27001 experience are essential. This role focuses on driving governance, risk, and compliance (GRC) objectives across the organization, maintaining

Qualifications

• 5+ years in GRC or information security compliance.
• Led ISO 27001 implementation and certification.
• Strong knowledge of ISO 27001:2022 and ISMS operations.
• Experience coordinating external audits and remediation.
• Experience developing policies and control documentation.
• Hands-on with a GRC platform such as Drata.
• Strong project management and stakeholder skills.
• Ability to drive cross-functional initiatives.

Responsibilities

• Lead end-to-end ISO 27001 implementation and certification.
• Develop implementation plans, milestones, and responsibilities.
• Conduct gap assessments and coordinate remediation.
• Define ISMS scope, objectives, and SoA.
• Coordinate external audits and evidence collection.
• Maintain audit readiness and surveillance activities.
• Provide regular progress updates to the GRC Manager.
• Manage ISMS risk assessments and risk treatment.

Skills

GRC

InfoSec compliance

ISO 27001

Audit coordination

Project management

Stakeholder mgmt

Education

Bachelor's degree

Tools

Drata

Job description

Accela is seeking a Senior Compliance Analyst to lead ISO/IEC 27001:2022 implementation, certification, and ongoing ISMS maintenance. You will collaborate with Information Security, IT, Engineering, Legal, HR, and other stakeholders to implement controls, manage compliance activities, and prepare for audits.

Strong project management and hands-on ISO 27001 experience are essential. This role focuses on driving governance, risk, and compliance (GRC) objectives across the organization, maintaining