Senior Information Security & Compliance Lead

SCOR Group; Charlotte (NC); Hybrid; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical coverage

401k plan

Defined contribution retirement

Life insurance

Disability insurance

Parental leave

Volunteer time

Summer Fridays

Learning & development resources

Wellness tools

Gym membership discounts

Job summary

SCOR Group seeks an Information Security Lead for Velogica US in Charlotte, NC, to own the security and compliance program. You will partner with global security teams to align local execution with the SDS roadmap, combining hands-on security with GRC leadership across SOC 2, ISO 27001, and client assurance.

You’ll manage cross-functional stakeholders, drive evidence collection, and ensure audit-ready controls while supporting DevSecOps, cloud security, and incident response.

Qualifications

• Bachelor’s degree in computer science or related field; equivalent experience considered.
• Master’s degree in cybersecurity or related discipline is advantageous but not required.
• Certifications such as CISSP/CISM/CRISC/CCSP or ISO 27001 Lead Implementer are preferred.
• Additional cloud security or DevSecOps training is a plus.
• 7+ years of progressive information security, engineering, or operations experience.
• Experience with SOC 2, ISO 27001/27002, NIST CSF, CIS Controls, COBIT or equivalent.
• Hands-on security across Azure and GCP; experience harmonizing controls and assurance.
• Ability to translate security requirements into practical operating controls.
• Experience managing client-facing assurance activities and audits.

Responsibilities

• Act as local lead for Velogica US security and compliance, coordinating with global teams.
• Develop and maintain Velogica security and compliance policies and controls.
• Lead SOC 2 Type II and ISO 27001 alignment efforts and audit readiness.
• Harmonize security practices across SDS and Velogica US with common baselines.
• Provide hands-on security guidance across cloud, DevSecOps, and secure SDLC.
• Collaborate with engineering, data, product, legal, and vendor management teams to embed security in delivery.
• Manage client security questionnaires, due diligence, and assurance discussions.
• Coordinate penetration tests, remediation planning, and status reporting.
• Support incident response planning, investigations, and post-incident actions.
• Maintain audit-ready documentation, control evidence, risk registers, and action logs.

Skills

Information security

GRC management

SOC 2

ISO 27001

Cloud security (Azure/GCP)

DevSecOps

Vulnerability management

Risk management

Audit readiness

Stakeholder management

Education

Bachelor’s degree in CS/IS/Engineering or related field

Master’s degree in Cybersecurity/IS (advantageous)

Professional security certifications (CISSP/CISM/CRISC/CCSP)

Tools

Azure

GCP

Job description

SCOR Group seeks an Information Security Lead for Velogica US in Charlotte, NC, to own the security and compliance program. You will partner with global security teams to align local execution with the SDS roadmap, combining hands-on security with GRC leadership across SOC 2, ISO 27001, and client assurance.

You’ll manage cross-functional stakeholders, drive evidence collection, and ensure audit-ready controls while supporting DevSecOps, cloud security, and incident response.