Senior GRC & Information Security Lead

CloudHQ; Ashburn (VA); Sur place; USD 140 000 - 190 000; Plein temps

Résumé du poste

CloudHQ is seeking an Information Security & Compliance Manager to lead GRC, audits, and regulatory compliance across our global data center platforms. You will drive ISMS activities, coordinate with internal and external auditors, and develop robust policies and controls.

The role requires extensive experience with ISO 27001, SOC 1/2, and related frameworks, along with hands-on GRC tooling expertise and strong leadership abilities to guide a growing team.

Qualifications

• 7+ years of demonstrated professional experience in Governance, Risk, and Compliance (GRC), cybersecurity compliance, IT audit, risk management, or closely related functions
• Minimum 5 years of hands-on ISO 27001, SOC 1, SOC 2, and/or other recognized security, risk, or compliance frameworks experience
• Minimum 5 years of hands-on experience using GRC platforms such as OneTrust, Hyperproof, RSA Archer, ServiceNow GRC, AuditBoard, LogicGate, or comparable solutions
• Minimum 3 years of demonstrated experience managing or directly supervising GRC, information security, audit, or compliance professionals
• Experience leading, coaching, and developing team members and managing priorities and delivery quality
• Experience leading internal and external audits, certifications, attestations, risk assessments, and remediation programs
• Knowledge ofISO 27001, SOC 1/2, and related control environments; ability to translate requirements into practical controls
• Strong project management, communication, and stakeholder management skills

Responsabilités

• Manage day-to-day execution and continual improvement of CloudHQ’s GRC, audit, information security compliance programs
• Provide leadership and professional development to Information Security & Compliance Analysts
• Lead audits, attestations, and remediation activities with cross-functional teams
• Oversee ISMS implementation and ongoing ISO 27001:2022, SOC 1, SOC 2 compliance efforts
• Coordinate documentation, evidence collection, and reporting for regulatory and customer requirements
• Drive process improvements, governance, and automation to enhance efficiency and audit readiness

Connaissances

GRC leadership

Audit management

ISO 27001

SOC 1/2

Risk assessment

Policy development

Team leadership

Regulatory compliance

Communication skills

Formation

Bachelor's degree in a related field

Outils

OneTrust

Hyperproof

RSA Archer

ServiceNow GRC

AuditBoard

LogicGate

Description du poste

CloudHQ is seeking an Information Security & Compliance Manager to lead GRC, audits, and regulatory compliance across our global data center platforms. You will drive ISMS activities, coordinate with internal and external auditors, and develop robust policies and controls.

The role requires extensive experience with ISO 27001, SOC 1/2, and related frameworks, along with hands-on GRC tooling expertise and strong leadership abilities to guide a growing team.