Security & Privacy Lead - ISO 27001 Auditor

KKCompany Technologies Inc.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

KKCompany Technologies Inc. seeks an experienced Information Security Specialist to operate independently and align rapid growth with ISO/IEC 27001 and 27701 and other security/privacy standards.

You will drive audits, policy development, and security awareness while working with product, operations, and compliance teams to embed a security-first mindset as the company scales. You will lead audits, develop and enforce policies, monitor regulations, perform risk assessments, and deliver awareness

Qualifications

• ISO/IEC 27001:2022 Lead Auditor certification or equivalent audit experience.
• Minimum 2 years in information security management or security audit roles with proven ISO 27001 internal audits.
• Drafting and maintaining security and privacy policies and procedures aligned with recognized standards.
• Familiarity with risk assessment methodologies and maintaining a risk register.
• Ability to design and deliver security awareness materials for non-technical audiences.
• Comfort reading English standards and producing concise written documents; basic spoken English for discussions.
• Strong interpersonal and coordination skills across functions and external advisors.
• Familiarity with project tracking tools like GitLab or Jira and basic project management practices.
• Nice to have: CEH, CISA, CISM, CIPM, or ISO/IEC 27701 Lead Auditor certification; background in tech/cloud services.

Responsibilities

• Lead internal audits against ISO 27000-series standards, track remediation, and manage external audit schedules and evidence.
• Develop, update, and enforce information security and privacy policies, procedures, and records to meet regulatory and standard requirements.
• Monitor developments in security and privacy regulations and advise on control adjustments.
• Conduct annual risk assessments, maintain the risk register, and coordinate mitigation actions across teams.
• Design and deliver security and privacy awareness training and campaigns to raise organization-wide security awareness.
• Collaborate with engineering, cloud operations, legal, and external consultants to ensure controls remain effective and aligned with business needs.

Skills

Audits & compliance

Policy drafting

Security awareness

Risk assessment

Cross-functional collaboration

Project management basics

GitLab/Jira

Security knowledge

Education

ISO/IEC 27001 Lead Auditor certification

Tools

GitLab

Jira

Job description

KKCompany Technologies Inc. seeks an experienced Information Security Specialist to operate independently and align rapid growth with ISO/IEC 27001 and 27701 and other security/privacy standards.

You will drive audits, policy development, and security awareness while working with product, operations, and compliance teams to embed a security-first mindset as the company scales. You will lead audits, develop and enforce policies, monitor regulations, perform risk assessments, and deliver awareness