Senior GRC & Compliance Leader — ISO 27001 & SOC Expert

CloudHQ LLC; Ashburn (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) with match

12 paid holidays

Generous PTO

Development opportunities

Medical, dental, vision, life ins.

Job summary

CloudHQ LLC seeks an Information Security & Compliance Manager to lead GRC, information security compliance, audits, and remediation efforts. You will guide a team of analysts, coordinate ISO 27001:2022, SOC 1/2 activities, and drive continual improvement across the organization.

You will oversee ISMS, risk assessments, control libraries, and evidence management, while aligning with regulatory requirements and customer expectations. A strategic role with hands-on leadership responsibilities.

Qualifications

• Minimum 7 years of demonstrated professional experience in Governance, Risk, and Compliance (GRC) or closely related functions.
• Minimum 5 years of hands-on experience with ISO 27001, SOC 1, SOC 2, and/or other recognized security frameworks.
• Minimum 5 years of hands-on experience using GRC platforms such as OneTrust, Hyperproof, RSA Archer, ServiceNow GRC, AuditBoard, LogicGate, or comparable solutions.
• Minimum 3 years of supervising GRC, information security, audit, or compliance professionals.
• Demonstrated experience leading, coaching, and developing team members; prioritization and workload management.
• Experience leading internal and external audits, certifications, control assessments, risk assessments, and remediation programs.
• Experience coordinating multiple compliance frameworks, audits, assessments, and remediation activities simultaneously.
• Strong knowledge of GRC principles, information security risk management, and audit methodologies.
• Ability to translate framework and regulatory requirements into practical controls and processes.
• Understanding of privacy and data protection requirements; ISO 14001/ISO 50001 preferred.

Responsibilities

• Manage day-to-day GRC, audit, and information security compliance programs and improvements.
• Provide leadership, coaching, and development to Information Security & Compliance Analysts.
• Lead audits, certifications, attestations, and remediation activities; coordinate with stakeholders.
• Maintain ISMS and compliance with ISO 27001:2022, SOC 1/2, and related frameworks.
• Oversee documentation, evidence collection, and audit readiness across the organization.
• Develop and maintain policies, standards, procedures, and risk documentation.
• Coordinate with process owners to implement practical remediation plans.
• Report findings and remediation status to management and ISO Steering Committee.
• Promote awareness and training on security and compliance.

Skills

GRC governance

Audits & assessments

Risk management

Leadership & coaching

Policy development

Documentation & audit readiness

Stakeholder management

Compliance governance

Continuous improvement

Regulatory awareness

Education

Bachelor’s degree (related field)

ISO 27001 Lead Auditor / Lead Implementer certification

CISA / CRISC / CISM / CISSP certification preferred

ISO 14001/ISO 50001 auditor credentials desirable

Tools

OneTrust

Hyperproof

RSA Archer

ServiceNow GRC

AuditBoard

LogicGate

Job description

CloudHQ LLC seeks an Information Security & Compliance Manager to lead GRC, information security compliance, audits, and remediation efforts. You will guide a team of analysts, coordinate ISO 27001:2022, SOC 1/2 activities, and drive continual improvement across the organization.

You will oversee ISMS, risk assessments, control libraries, and evidence management, while aligning with regulatory requirements and customer expectations. A strategic role with hands-on leadership responsibilities.