Remote InfoSec Policy Lead - GRC & Compliance

Naukri Mitra; United States; Remote; USD 114,000 - 139,000; Full time

Benefits offered by this job

Flexible scheduling

Async work across time zones

Health, dental, and vision insurance

Learning stipends and certificationbud

Job summary

Secure Digital Systems is seeking a Virtual Information Security Policy Specialist (Remote) to define and enforce enterprise-wide security policies, aligning with ISO/NIST and HIPAA where applicable. You will collaborate across IT, legal, and security teams to embed policy into product and operations.

The role offers flexible scheduling, async collaboration across time zones, and growth toward governance leadership.

Qualifications

• Bachelor’s degree in cybersecurity, IT, or related discipline.
• 4+ years in GRC or policy-based cybersecurity roles.
• Knowledge of NIST, ISO 27001, and SOC 2.
• Strong written communication for policy docs.

Responsibilities

• Policy Development and Oversight: Draft, review, and maintain enterprise-wide security policy documentation; align with ISO/IEC 27001, NIST CSF, SOC 2, HIPAA; integrate controls into standards.
• Governance and Regulatory Compliance: Maintain compliance mappings; support GDPR/CCPA through documentation and audit readiness.
• Stakeholder Enablement and Collaboration: Align policy with product development, vendor onboarding, and operations; run policy awareness campaigns.
• Framework Improvement and Agility: Monitor cybersecurity trends and regulations; run stakeholder reviews to refine governance models.

Skills

Policy drafting

Cross-functional collaboration

Cybersecurity policy

Education

Bachelor’s degree in Cybersecurity, IT, or related discipline

Tools

ServiceNow GRC

RSA Archer

Job description

Secure Digital Systems is seeking a Virtual Information Security Policy Specialist (Remote) to define and enforce enterprise-wide security policies, aligning with ISO/NIST and HIPAA where applicable. You will collaborate across IT, legal, and security teams to embed policy into product and operations.

The role offers flexible scheduling, async collaboration across time zones, and growth toward governance leadership.