Security Governance Lead - ISO 27001 & DORA

Alan; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Alan is seeking a Security Governance & Risk professional to own the ISO 27001 ISMS, define scope and ensure ongoing compliance with DORA, HDS and other regulatory requirements. You will lead audit programmes, coordinate with Internal Audit, and collaborate with Legal and Risk teams to manage third‑party security and incidents.

The role emphasizes translating complex regulations into practical controls, maintaining a robust security posture across infrastructure, platform, and engineering teams.

Qualifications

• Experience leading ISO 27001 ISMS programmes and audits.
• Deep understanding of DORA, RGPD, HDS and related health data regulations.
• Ability to translate regulatory requirements into technical controls.

Responsibilities

• Own the security governance and risk posture for the company.
• Lead security audits and coordinate with internal/external auditors.
• Manage third‑party security risk and vendor assessments.
• Collaborate with Legal, Internal Audit and Risk teams to ensure regulatory compliance.

Skills

ISO 27001

DORA compliance

Risk management

Regulatory liaison

Audit coordination

Job description

Alan is seeking a Security Governance & Risk professional to own the ISO 27001 ISMS, define scope and ensure ongoing compliance with DORA, HDS and other regulatory requirements. You will lead audit programmes, coordinate with Internal Audit, and collaborate with Legal and Risk teams to manage third‑party security and incidents.

The role emphasizes translating complex regulations into practical controls, maintaining a robust security posture across infrastructure, platform, and engineering teams.