Remote Infosec & GRC Leader - ISO27001 & Risk

Avantdigitalnow; San Francisco (CA); Remote; USD 95,000 - 130,000; Full time

Job summary

A technology consulting firm is seeking an Infosec or GRC Leader to implement and manage Information Security Management Systems and coordinate risk assessments. The ideal candidate will have 8-10 years of experience in Information Security and Compliance, with expertise in ISO 27001 and relevant standards. Responsibilities include managing compliance, preparing Security Assurance materials, and supporting supply chain risk management. The role is available remotely for a duration of 6+ months.

Qualifications

• 8-10 years of experience in Information Security, Compliance, Risk Management.
• Expertise in implementing ISO 27001 and relevant standards.
• Preferred certifications include CISSP and ISO 27001 Lead Auditor.

Responsibilities

• Support implementing and managing Information Security Management Systems.
• Coordinate Risk assessment activities and enhance Common Controls.
• Manage compliance and sustain efforts for Common controls.
• Support Supply Chain and Third-Party Vendor Risk management.

Skills

Information Security

Compliance

Risk Management

ISO 27001 implementation

NIST 800-53

CISSP certification

Job description

A technology consulting firm is seeking an Infosec or GRC Leader to implement and manage Information Security Management Systems and coordinate risk assessments. The ideal candidate will have 8-10 years of experience in Information Security and Compliance, with expertise in ISO 27001 and relevant standards. Responsibilities include managing compliance, preparing Security Assurance materials, and supporting supply chain risk management. The role is available remotely for a duration of 6+ months.