Sr. Director, Compliance

INSPYR Solutions; Los Angeles (CA); On-site; USD 150,000 - 200,000; Full time

Job summary

INSPYR Solutions seeks a Sr. Director, Compliance to lead audit and compliance efforts for EIT. The role defines and implements IT policies ensuring ISO/IEC 27000 alignment with risk management and governance.

You will bridge technical teams, business stakeholders, and executives to foster security and continuous improvement. The candidate has deep ISO/IEC 27000 expertise, strong risk management experience, and a track record of driving certification programs in a tech-driven environment.

Qualifications

• Experience building an information security program with ISO/IEC 27000.
• Experience aligning ISO/IEC 27000 with NIST CSF and governance frameworks.
• Ability to develop, implement and maintain information security policies and guidelines.

Responsibilities

• Lead ISO/IEC 27000 implementation and ensure ISMS compliance.
• Coordinate ISO/27000 certification and remediation of gaps.
• Interface with internal/external auditors and regulatory bodies.
• Assess information security risks and align with business objectives.
• Create and maintain EIT policies and controls; audit governance.
• Collaborate with Planning, Legal, Engineering, Operations and Business units to embed standards.
• Present risk assessments and audit outcomes to executive leadership.

Skills

ISO/IEC 27000 standards

NIST CSF knowledge

Risk assessment

Policy development

Cross-functional collaboration

Effective communication

Education

Bachelor's or Master's in CS/IT/Engineering

Lead Auditor / CISSP / CISM preferred

Job description

4 days ago Be among the first 25 applicants

This range is provided by INSPYR Solutions. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$150,000.00/yr - $200,000.00/yr

Role: Sr. Director, Compliance
Location: Los Angeles 90094 (2-3 days on site)
Duration: Full Time, Direct Hire
Compensation: $200-2980k/yr.
Work Requirements: US Citizen, GC Holders or Authorized to Work in US

The E&IT Compliance Sr. Director will serve as a lead on all audit and compliance for Engineering and IT. This role will define and implement IT policies and procedures to ensure that Engineering and Information Technology (E&IT) adheres to its standards and other relevant controls. This role will drive compliance within E&IT that supports enterprise risk management at the overall organization level, and aligns with information security risk management. The ideal candidate has in depth knowledge of the ISO/IEC 27000 family of standards, and strong experience in information security risk management frameworks such as the NIST CSF, compliance, and audit processes within a technology-driven environment. This role will serve as a critical bridge between technical teams, business stakeholders, and executive leadership to drive a culture of security, compliance, and continuous improvement.

Key Responsibilities & Duties:

• Implement the ISO/IEC 27000 family of standards within the organization, and ensure the organization's Information Security Management System (ISMS) is in compliance with the standards.
• Develop and lead the organization's initial ISO/IEC 27000 certification and recertification efforts as our internal auditor and manage remediation plans to address compliance gaps.
• Serve as the internal subject matter expert (SME) on ISO/IEC 27000 family and interface with internal and external auditors, certification bodies, and regulatory agencies.
• Assess information security risks in alignment with the InfoSec team and business objectives.
• Create and maintain a library of E&IT policies, guidelines, process and controls to align with ISO/IEC 27000 standards and NIST CSF framework.
• Own the document governance and lifecycle of E&IT policies, guidelines, process and controls, ensuring they are audited and reviewed.
• Collaborate with Planning, Risk Management, Legal, Engineering, Operations, and Business functions to integrate ISO-aligned standards and controls into business operations.
• Regularly interact with senior business leaders to establish strategic plans and objectives.
• Ensure all E&IT systems comply with security, regulatory, and governance standards, minimizing risks to business operations.
• Monitor changes in the ISO 27000 family of standards and other relevant regulatory frameworks (e.g., NIST, SOC 2, GDPR) to adapt organizational policies accordingly.
• Present reports and strategic insights to executive leadership, including risk assessments, audit outcomes, and compliance posture.
• Build and lead a high-performing compliance and risk management function within E&IT and in collaboration with ICANN business functions.
• Facilitate the development of a significant knowledge base in others; may define role of staff members
• Other duties as assigned or requested within the scope of compliance, risk management, and audit.

Required Knowledge, Skills, and Abilities (KSAs):

• Deep understanding of the ISO/IEC 27000 family of standards, including principles, controls, structure, and best practices and experience in building a high-performing compliance and risk management program within a technical function.
• Knowledge of how information security risk management frameworks, specifically NIST CSF, can crosswalk to ISO/IEC 27000 family of standards.
• Knowledge of how to perform risk assessments to identify vulnerabilities, threats, and impacts, and how to create risk treatment plans.
• Knowledge of how to design and implement risk mitigation strategies, control measures, and residual risk evaluation.
• Understanding of Compliance and Legal requirements around data privacy and contractual obligations.
• Expertise in preparing for both internal and external audits, ensuring that controls and systems are compliant with ISO/IEC 27000.
• Ability to develop, implement, and maintain information security policies, procedures, and guidelines.
• Understanding of how information security fits into the larger governance framework of an organization.
• Knowledge of incident response processes and business Continuity Planning (BCP) and disaster recovery plans that are in line with ISO/IEC 27000 standards.
• Ability to work cross-functionally and influence stakeholders at all levels.
• Strong interpersonal communication skills and the ability to maintain effective working.
• Ability to effectively facilitate meetings.

Education and Experience Requirements:

• Bachelor's or Master's degree in Computer Science, IT, Engineering, or significant work experience in a related field.
• Minimum twelve (12) years of experience in information security, compliance, or IT governance roles.
• ISO/IEC 27000 Lead Auditor, CISSP, CISM, or similar certifications preferred.

Role: Sr. Director, Compliance
Location: Los Angeles 90094 (2-3 days on site)
Duration: Full Time, Direct Hire
Compensation: $200-2980k/yr.
Work Requirements: US Citizen, GC Holders or Authorized to Work in US

The E&IT Compliance Sr. Director will serve as a lead on all audit and compliance for Engineering and IT. This role will define and implement IT policies and procedures to ensure that Engineering and Information Technology (E&IT) adheres to its standards and other relevant controls. This role will drive compliance within E&IT that supports enterprise risk management at the overall organization level, and aligns with information security risk management. The ideal candidate has in depth knowledge of the ISO/IEC 27000 family of standards, and strong experience in information security risk management frameworks such as the NIST CSF, compliance, and audit processes within a technology-driven environment. This role will serve as a critical bridge between technical teams, business stakeholders, and executive leadership to drive a culture of security, compliance, and continuous improvement.

Key Responsibilities & Duties:

• Implement the ISO/IEC 27000 family of standards within the organization, and ensure the organization's Information Security Management System (ISMS) is in compliance with the standards.
• Develop and lead the organization's initial ISO/IEC 27000 certification and recertification efforts as our internal auditor and manage remediation plans to address compliance gaps.
• Serve as the internal subject matter expert (SME) on ISO/IEC 27000 family and interface with internal and external auditors, certification bodies, and regulatory agencies.
• Assess information security risks in alignment with the InfoSec team and business objectives.
• Create and maintain a library of E&IT policies, guidelines, process and controls to align with ISO/IEC 27000 standards and NIST CSF framework.
• Own the document governance and lifecycle of E&IT policies, guidelines, process and controls, ensuring they are audited and reviewed.
• Collaborate with Planning, Risk Management, Legal, Engineering, Operations, and Business functions to integrate ISO-aligned standards and controls into business operations.
• Regularly interact with senior business leaders to establish strategic plans and objectives.
• Ensure all E&IT systems comply with security, regulatory, and governance standards, minimizing risks to business operations.
• Monitor changes in the ISO 27000 family of standards and other relevant regulatory frameworks (e.g., NIST, SOC 2, GDPR) to adapt organizational policies accordingly.
• Present reports and strategic insights to executive leadership, including risk assessments, audit outcomes, and compliance posture.
• Build and lead a high-performing compliance and risk management function within E&IT and in collaboration with ICANN business functions.
• Facilitate the development of a significant knowledge base in others; may define role of staff members
• Other duties as assigned or requested within the scope of compliance, risk management, and audit.

Required Knowledge, Skills, and Abilities (KSAs):

• Deep understanding of the ISO/IEC 27000 family of standards, including principles, controls, structure, and best practices and experience in building a high-performing compliance and risk management program within a technical function.
• Knowledge of how information security risk management frameworks, specifically NIST CSF, can crosswalk to ISO/IEC 27000 family of standards.
• Knowledge of how to perform risk assessments to identify vulnerabilities, threats, and impacts, and how to create risk treatment plans.
• Knowledge of how to design and implement risk mitigation strategies, control measures, and residual risk evaluation.
• Understanding of Compliance and Legal requirements around data privacy and contractual obligations.
• Expertise in preparing for both internal and external audits, ensuring that controls and systems are compliant with ISO/IEC 27000.
• Ability to develop, implement, and maintain information security policies, procedures, and guidelines.
• Understanding of how information security fits into the larger governance framework of an organization.
• Knowledge of incident response processes and business Continuity Planning (BCP) and disaster recovery plans that are in line with ISO/IEC 27000 standards.
• Ability to work cross-functionally and influence stakeholders at all levels.
• Strong interpersonal communication skills and the ability to maintain effective working.
• Ability to effectively facilitate meetings.

Education and Experience Requirements:

• Bachelor's or Master's degree in Computer Science, IT, Engineering, or significant work experience in a related field.
• Minimum twelve (12) years of experience in information security, compliance, or IT governance roles.
• ISO/IEC 27000 Lead Auditor, CISSP, CISM, or similar certifications preferred.

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities

Seniority level

• Seniority levelDirector

Employment type

• Employment typeFull-time

Job function

• Job functionInformation Technology
• IndustriesIT Services and IT Consulting

Referrals increase your chances of interviewing at INSPYR Solutions by 2x

Get notified about new Director of Compliance jobs in Los Angeles, CA.

Los Angeles Metropolitan Area 2 weeks ago