IT Compliance Director

Blue Signal; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

Blue Signal seeks an IT Compliance Director to lead the development and execution of its security, risk management, and compliance strategy within the critical infrastructure sector. The role offers significant autonomy, direct access to executive leadership, and the chance to shape the security posture of the business while establishing a foundation for long-term compliance.

The Director will drive comprehensive IT security and compliance strategies, prepare for SOC 2 Type II and ISO 27001

Qualifications

• Experience in information security within highly regulated environments.
• Proven ability to develop security frameworks and control measures.
• Experience managing audits for SOC 2 Type II or ISO 27001 is preferred.

Responsibilities

• Lead the development and execution of security, risk management and compliance strategy.
• Oversee audit management and readiness for SOC 2 Type II and ISO 27001.
• Manage external IT and cybersecurity service providers and consultants.
• Collaborate with business leaders to align security requirements with organizational goals.

Skills

Information security

IT compliance

Cybersecurity

Technology auditing

Job description

The client is seeking an IT Compliance Director to lead the development and execution of its security, risk management, and compliance strategy within the critical infrastructure sector. This leadership role offers the opportunity to establish scalable security programs, enhance operational resilience, and support the organization's ongoing growth. The position provides significant autonomy, direct access to executive leadership, and the chance to shape the security posture of the business while building a strong foundation for long-term compliance.

The IT Compliance Director will be responsible for creating and maintaining comprehensive IT security and compliance strategies, including readiness for SOC 2 Type II and ISO 27001 certifications, as well as ongoing audit management. Key responsibilities include evaluating current technology infrastructure, identifying vulnerabilities, prioritizing risks, and implementing improvement plans. The role also oversees physical security practices, manages external IT and cybersecurity service providers, and collaborates with business leaders and stakeholders to align security requirements with organizational objectives.

The ideal candidate will have extensive experience in information security, IT compliance, cybersecurity, or technology auditing, particularly within highly regulated environments such as data centers. Demonstrated expertise in developing security frameworks, managing audit processes, and implementing control measures is essential. Strong technical knowledge of network infrastructure, endpoint security, and physical security systems is required, along with excellent communication skills to effectively convey technical risks and compliance priorities to various audiences.