Senior InfoSec & Compliance Analyst

CloudHQ LLC; Ashburn (VA); In loco; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Benefit

401k Matching

Paid Holidays

PTO

Training Opportunities

Descrizione del lavoro

CloudHQ is seeking a Senior Information Security & Compliance Analyst to advance its GRC, ISMS, and audit programs in the Ashburn, VA area. You will independently perform risk assessments, control evaluations, and support ISO 27001:2022, SOC 1/2, and other frameworks while guiding remediation with process owners.

Join a team that values accuracy, documentation, and collaborative problem-solving, with opportunities to shape security controls and evidence management across the organization.

Competenze

• 5+ years in Governance, Risk and Compliance, cybersecurity, IT audit, or risk management.
• Hands-on ISO 27001, SOC 1, SOC 2 experience.
• Experience using GRC platforms like OneTrust, Hyperproof, RSA Archer, ServiceNow GRC, AuditBoard, LogicGate.
• Experience conducting internal audits, control assessments, risk assessments, and remediation.
• Strong documentation and evidence-management skills with audit readiness.
• Bachelor’s degree; professional certifications are preferred.

Mansioni

• Independently perform GRC, audit, risk, control, and compliance activities.
• Support ISMS maintenance and continual improvement.
• Lead activities supporting ISO 27001:2022, SOC 1, SOC 2 and other frameworks.
• Support ISO 14001 and ISO 50001 management system activities as applicable.
• Conduct internal audits, risk, and remediation assessments.
• Assist audits, certifications, and attestations with evidence collection and documentation review.
• Collaborate with owners to evaluate controls, identify gaps, and develop remediation actions.
• Track findings and remediation through closure; maintain GRC platforms and reports.
• Develop and maintain policies, standards, and supporting compliance docs.
• Provide guidance to teams on GRC requirements and controls.

Conoscenze

GRC concepts

Audit coordination

Documentation

Communication

Formazione

Bachelor’s degree

ISO 27001 Lead Auditor/Implementer

CISA / CRISC / CISM / CISSP (preferred)

Strumenti

OneTrust

Hyperproof

RSA Archer

ServiceNow GRC

AuditBoard

LogicGate

Microsoft Office

Descrizione del lavoro

CloudHQ is seeking a Senior Information Security & Compliance Analyst to advance its GRC, ISMS, and audit programs in the Ashburn, VA area. You will independently perform risk assessments, control evaluations, and support ISO 27001:2022, SOC 1/2, and other frameworks while guiding remediation with process owners.

Join a team that values accuracy, documentation, and collaborative problem-solving, with opportunities to shape security controls and evidence management across the organization.