IT Compliance Director

Blue Signal Search; Houston (TX); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Annual bonus 15%

Comprehensive benefits

Executive visibility

Job summary

Blue Signal Search is seeking an IT Compliance Director to build and lead the security, risk management, and compliance strategy for a growing organization in the critical infrastructure sector in Houston. This hands-on leader will establish scalable security programs and strengthen operational resilience, with direct access to executive leadership.

This role offers a target 15% annual bonus, comprehensive benefits, and the autonomy to shape security posture while supporting business growth and

Qualifications

• 8+ years of experience in information security, IT compliance, cybersecurity, or technology auditing, including at least 3 years in regulated environments.
• Proven ownership of SOC 2 Type II and ISO 27001 programs through audits or certifications.
• Experience developing security frameworks, policies, internal controls, risk assessments, and repeatable audit processes.

Responsibilities

• Develop and lead IT security and compliance strategy (SOC 2 Type II readiness, ISO 27001).
• Evaluate infrastructure and procedures to identify vulnerabilities and prioritize improvements.
• Create security policies, controls, risk assessments, incident response, and audit docs.
• Oversee physical security across facilities, access, and surveillance.
• Provide technical oversight of network security, identity management, patching, and logging.
• Manage external IT/security providers and ensure service delivery.
• Collaborate with leaders to align security with business objectives.
• Lead security awareness, audit prep, business continuity, and executive reporting.

Skills

Information security

IT compliance

Cybersecurity

Risk management

Audit management

Security frameworks

Physical security

Executive communication

Job description

Our client, a growing organization in the critical infrastructure industry, is seeking an IT Compliance Director to build and lead its security, risk management, and compliance strategy. This is an exciting opportunity for a hands-on leader to establish scalable security programs, strengthen operational resilience, and help position the business for continued expansion. With direct access to executive leadership and significant ownership over key initiatives, this individual will have the opportunity to shape the organization's security posture while building the foundation for long-term compliance success.

This Role Offers:

• Competitive compensation package with a target 15% annual bonus and comprehensive benefits.
• Opportunity to develop and lead enterprise security and compliance programs with meaningful autonomy and executive visibility.
• High-impact leadership position supporting business growth, operational reliability, and customer confidence.
• Collaborative environment where technical expertise, sound judgment, and proactive problem-solving are highly valued.

Focus:

• Develop and execute a comprehensive IT security and compliance strategy, including SOC 2 Type II readiness, ISO 27001 certification, and ongoing audit management.
• Evaluate existing technology infrastructure, security practices, and operational procedures to identify vulnerabilities, prioritize risks, and establish actionable improvement plans.
• Create and maintain security policies, internal controls, risk assessments, incident response procedures, and audit documentation that support sustainable compliance.
• Oversee physical security practices across critical facilities, including access management, surveillance systems, visitor procedures, and security incident coordination.
• Provide technical oversight of network security, endpoint protection, identity management, vulnerability remediation, system updates, and security monitoring.
• Manage external IT and cybersecurity service providers, establish performance expectations, and ensure timely resolution of security and operational concerns.
• Collaborate with business leaders, facility operations, and external stakeholders to align security requirements with business objectives, customer expectations, and operational needs.
• Lead security awareness initiatives, audit preparation, business continuity planning, and executive reporting to strengthen organizational resilience.

Skill Set:

• 8+ years of experience in information security, IT compliance, cybersecurity, or technology auditing, including at least 3 years in data centers or another highly regulated environment.
• Demonstrated ownership of SOC 2 Type II and ISO 27001 programs through completed audits or certification, including control implementation and remediation management.
• Strong experience developing security frameworks, policies, risk assessments, internal controls, and repeatable audit processes.
• Hands-on knowledge of physical security systems, including electronic access controls, surveillance technology, and facility security procedures.
• Practical technical understanding of network infrastructure, endpoint security, identity and access management, patching, vulnerability management, and logging.
• Proven ability to oversee outsourced IT or security partners, evaluate service delivery, and enforce performance and security expectations.
• Strong analytical and troubleshooting skills, with the ability to assess unfamiliar technical environments, identify root causes, prioritize risks, and develop realistic remediation strategies.
• Excellent written and verbal communication skills, with the ability to explain technical risks, compliance priorities, and recommended solutions to executives, customers, and operational teams.