Sr. Executive Audit and Compliance

Summary:

The Sr. Executive Audit and Compliance is responsible for leading and managing the implementation of ISO 27001 and SOC2 Type2 across the organization. This includes developing and implementing an Information Security Management System (ISMS), conducting risk assessments, conducting internal audits, compliance monitoring, policy development, incident response and supporting and managing the certification process, BCP and DR activities

Essential Duties and Responsibilities:

• Lead the implementation of Information and Cyber Security Framework and SOC2 Type2 compliance
• Conduct risk assessments to identify and prioritize information security risks and prepare gap analysis report
• Develop and implement security controls to mitigate identified risks
• Plan and execute internal audits
• Conduct vendor assessment audits
• Manage and support in internal / external audit for the certification process for information and Cybersecurity and SOC2 Type2 compliance
• Perform risk assessments, compliance monitoring, policy development, and incident response
• Monitor and maintain the cybersecurity compliance to ensure that it is effective and compliant
• Investigate and respond to information security incidents and plan mitigation actions

Qualifications and Requirements:

• Bachelor's degree in computer science, information security, or a related field
• 2 - 4 years of experience in information security, with a focus on ISO 27001 and SOC2 Type2
• Certified ISO 27001 Lead Implementer and/or Lead Auditor
• Experience in Information Security and SOC2 Type2 audits
• Strong understanding of information security best practices and standards
• Excellent communication and interpersonal skills
• Ability to work independently and as part of a team