Remote ISO 27001 Lead & ISMS Expert

Accela, Inc.; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

401(k) matching

Medical, dental and vision plans

Flexible time off

Job summary

Accela, Inc. is seeking an experienced Senior Compliance Analyst to lead ISO/IEC 27001:2022 program implementation, certification, and ongoing maintenance.

The role reports to the GRC Manager and serves as the primary SME for ISO 27001, driving ISMS development and continuous improvement across the organization. The ideal candidate will collaborate with Information Security, IT, Engineering, Legal, HR, and other stakeholders to implement controls, manage compliance, coordinate audits, and

Qualifications

• 5+ years in GRC or information security compliance.
• Experience leading ISO/IEC 27001 implementation and certification.
• Knowledge of ISO/IEC 27001:2022 and ISMS operations.
• Experience coordinating external certification audits.
• Hands-on with a GRC automation platform such as Drata.
• Strong project management, analytical and organizational skills.
• Excellent communication and stakeholder management.

Responsibilities

• Lead end-to-end ISO 27001 implementation and certification activities.
• Develop plans, milestones, deliverables and stakeholder roles.
• Conduct gap assessments and coordinate remediation actions.
• Maintain ISMS scope, objectives and SoA, and oversee audits.
• Collaborate with cross-functional teams and manage evidence collection.
• Monitor progress, risks and reporting to the GRC Manager.

Job description

Accela, Inc. is seeking an experienced Senior Compliance Analyst to lead ISO/IEC 27001:2022 program implementation, certification, and ongoing maintenance.

The role reports to the GRC Manager and serves as the primary SME for ISO 27001, driving ISMS development and continuous improvement across the organization. The ideal candidate will collaborate with Information Security, IT, Engineering, Legal, HR, and other stakeholders to implement controls, manage compliance, coordinate audits, and