Virtual Information Security Policy Specialist

Naukri Mitra; United States; Remote; USD 114,000 - 139,000; Full time

Benefits offered by this job

Flexible scheduling

Async work across time zones

Health, dental, and vision insurance

Learning stipends and certificationbud

Job summary

Secure Digital Systems is seeking a Virtual Information Security Policy Specialist (Remote) to define and enforce enterprise-wide security policies, aligning with ISO/NIST and HIPAA where applicable. You will collaborate across IT, legal, and security teams to embed policy into product and operations.

The role offers flexible scheduling, async collaboration across time zones, and growth toward governance leadership.

Qualifications

• Bachelor’s degree in cybersecurity, IT, or related discipline.
• 4+ years in GRC or policy-based cybersecurity roles.
• Knowledge of NIST, ISO 27001, and SOC 2.
• Strong written communication for policy docs.

Responsibilities

• Policy Development and Oversight: Draft, review, and maintain enterprise-wide security policy documentation; align with ISO/IEC 27001, NIST CSF, SOC 2, HIPAA; integrate controls into standards.
• Governance and Regulatory Compliance: Maintain compliance mappings; support GDPR/CCPA through documentation and audit readiness.
• Stakeholder Enablement and Collaboration: Align policy with product development, vendor onboarding, and operations; run policy awareness campaigns.
• Framework Improvement and Agility: Monitor cybersecurity trends and regulations; run stakeholder reviews to refine governance models.

Skills

Policy drafting

Cross-functional collaboration

Cybersecurity policy

Education

Bachelor’s degree in Cybersecurity, IT, or related discipline

Tools

ServiceNow GRC

RSA Archer

Job description

Virtual Information Security Policy Specialist (Remote)

Secure Digital Systems from Anywhere Step into a pivotal role as a Virtual Information Security Policy Specialist, where you'll define and enforce policies that safeguard modern digital ecosystems. If you're looking for a flexible role that blends risk governance, regulatory alignment, and cybersecurity policy design, this work-from-home opportunity is tailored for you. You'll lead enterprise-wide efforts to reduce threats, build trust, and advance security maturity through strategic documentation and standards enforcement. Collaborating virtually across industries, your expertise will shape robust frameworks aligned with data privacy mandates and compliance benchmarks.

Why This Remote Role Matters

• Strategic Impact on Global Cybersecurity
• Influence key cybersecurity directives across global organizations
• Advance compliance strategies that mitigate risk and protect critical data
• Collaborative and Technical Integration Partner with IT, legal, compliance, and security teams in diverse environments
• Strengthen hybrid cloud operations via policy-based governance

Key Responsibilities

• Policy Development and Oversight Core Functions Draft, review, and maintain enterprise-wide security policy documentation Align policies with recognized frameworks such as ISO/IEC 27001, NIST CSF, SOC 2, and HIPAA Integrate evolving regulatory and technical controls into foundational standards Threat Mitigation through Risk Strategy Risk Management Practices Partner with risk and audit teams to ensure coverage against emerging cyber risks Recommend actionable remediation strategies grounded in incident trends and assessments.
• Governance and Regulatory Compliance Compliance Duties Maintain compliance mappings and control matrices used in security audits and evaluations. Support global privacy regulations like GDPR and CCPA through accurate documentation and audit preparedness.
• Stakeholder Enablement and Collaboration Engagement and Training Facilitate alignment between security policy and product development, vendor onboarding, and operational procedures. Lead policy awareness campaigns, employee enablement sessions, and internal communication initiatives
• Framework Improvement and Agility Continuous Optimization Monitor cybersecurity trends and legislative updates to adjust policies for continued relevance Conduct stakeholder reviews and feedback loops to refine governance models

What You’ll Bring

• Bachelor’s degree in Cybersecurity, IT, or a closely related discipline
• 4+ years of experience in GRC (governance, risk, and compliance) or policy-based cybersecurity roles
• Knowledge of key regulatory frameworks and standards (NIST, ISO 27001, etc.)
• Strong written communication skills for policy documentation in cross-functional teams
• Experience with tools like ServiceNow GRC or RSA Archer for workflow and audit management
• Collaborative mindset and ability to translate technical security concepts into business-friendly language

Preferred Qualifications

• Additional Expertise CISSP, CISA, CISM, or similar professional security certifications
• Familiarity with securing cloud platforms (AWS, Azure, GCP) within regulated industries
• Experience in third-party/vendor risk review protocols
• Exposure to agile or DevSecOps environments with continuous governance needs

Salary & Benefits

Annual Salary: USD 126,223

• Flexible scheduling and async work across time zones
• Generous paid leave and well-being benefits
• Health, dental, and vision insurance packages
• Learning stipends and certification budgets to stay ahead in the cybersecurity field
• Growth pathways in governance leadership and strategic security advisory

What Makes This Role Unique

• Fully remote with impact across regions and industries
• Proactively focus on security by design rather than reactive issue tracking
• Autonomy to drive key policy decisions and establish best practices
• Opportunity to embed ethical standards, privacy protections, and operational resilience into core business models

Where Do You Fit In

• Ideal Candidate Traits Excel in policy-centric cybersecurity roles that demand accuracy and foresight
• Translate regulatory shifts into implementable security frameworks
• Thrive in asynchronous collaboration with cross-functional global teams
• See governance as a strategic asset in cybersecurity transformation
• Ready to Make a Difference? If you're driven by structure, impact, and innovation in cybersecurity policy, this role offers a platform to lead and evolve global governance practices.

We welcome applicants from the USA, Canada, UK, European Union, Australia, India, and many other global regions.