IT Compliance Director: ISO 27000 & Risk Lead

INSPYR Solutions; Los Angeles (CA); On-site; USD 150,000 - 200,000; Full time

Job summary

INSPYR Solutions seeks a Sr. Director, Compliance to lead audit and compliance efforts for EIT. The role defines and implements IT policies ensuring ISO/IEC 27000 alignment with risk management and governance.

You will bridge technical teams, business stakeholders, and executives to foster security and continuous improvement. The candidate has deep ISO/IEC 27000 expertise, strong risk management experience, and a track record of driving certification programs in a tech-driven environment.

Qualifications

• Experience building an information security program with ISO/IEC 27000.
• Experience aligning ISO/IEC 27000 with NIST CSF and governance frameworks.
• Ability to develop, implement and maintain information security policies and guidelines.

Responsibilities

• Lead ISO/IEC 27000 implementation and ensure ISMS compliance.
• Coordinate ISO/27000 certification and remediation of gaps.
• Interface with internal/external auditors and regulatory bodies.
• Assess information security risks and align with business objectives.
• Create and maintain EIT policies and controls; audit governance.
• Collaborate with Planning, Legal, Engineering, Operations and Business units to embed standards.
• Present risk assessments and audit outcomes to executive leadership.

Skills

ISO/IEC 27000 standards

NIST CSF knowledge

Risk assessment

Policy development

Cross-functional collaboration

Effective communication

Education

Bachelor's or Master's in CS/IT/Engineering

Lead Auditor / CISSP / CISM preferred

Job description

INSPYR Solutions seeks a Sr. Director, Compliance to lead audit and compliance efforts for EIT. The role defines and implements IT policies ensuring ISO/IEC 27000 alignment with risk management and governance.

You will bridge technical teams, business stakeholders, and executives to foster security and continuous improvement. The candidate has deep ISO/IEC 27000 expertise, strong risk management experience, and a track record of driving certification programs in a tech-driven environment.