GRC, Cybersecurity, and Compliance Professional
RemoteUnited States or Colombia
Job Summary
Manage and coordinate SOC 2 and ISO 27001 compliance initiatives, driving audit readiness through evidence collection, documentation management, and remediation tracking. Coordinate cross-functional stakeholders and control owners to ensure timely completion of security requirements, while organizing meetings and maintaining action-item tracking. Support internal and external audit activities, track risks and findings, and partner with cybersecurity leadership to translate compliance mandates into actionable tasks. Maintain compliance documentation, policies, and evidence repositories to ensure continuous improvement of security programs.
Required Qualifications
- 10+ years of experience in Cybersecurity, IT Audit, GRC, Compliance, Risk Management, or related fields
- Experience supporting or managing SOC 2 and/or ISO 27001 programs
- Strong Program Management and Project Management skills
- Experience coordinating audits, compliance initiatives, and cross-functional stakeholders
- Ability to communicate effectively with both technical and non-technical teams
- Experience managing action plans, timelines, risks, dependencies, and compliance deliverables
- Strong written and verbal English communication skills
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, or related discipline
Desired Qualifications
- Experience with cybersecurity governance and security maturity programs
- Experience supporting SOC 2 Type II audits and ISO 27001 certification efforts
- Familiarity with NIST CSF, CIS Controls, HIPAA, PCI-DSS, GDPR, or similar frameworks
- Experience using Jira, Confluence, Drata, Vanta, AuditBoard, ServiceNow GRC, or similar platforms
- Relevant certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.