





Metro location and mid-level experience increase competition, though niche GRC skills moderate applicant density.
Role demands specialized GRC and regulatory controls (PCI, HIPAA, SOC2), reducing cross-industry transferability.
Explicit 6+ years requirement plus mandated GRC frameworks and audit experience enforce strict filters.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Own and manage the organization's compliance program across Security, Privacy, and IT controls, ensuring alignment with frameworks such as ISO 27001, SOC 2 Type II, PCI DSS, HIPAA, GDPR.
Coordinate and lead internal and external audits, control testing, evidence collection, remediation tracking, and compliance assessments.
Develop, maintain, and update compliance policies, conduct training programs, manage compliance exceptions, vendor risk assessments, and maintain compliance reporting dashboards and KPIs.
6+ years of experience in IT Compliance, Information Security Governance, GRC, Audit, or Risk Management.
Experience managing compliance programs and regulatory audits involving standards like ISO 27001, SOC 2 Type II, PCI DSS, HIPAA, GDPR.
Bachelor's degree in Computer Science, Information Security, Information Systems, or related field.
Work Experience Required: 6+ years
Demonstrates strong expertise in compliance program ownership and regulatory audit coordination within IT and security domains.
Experienced in managing cross-functional stakeholder relationships in fast-paced, multi-disciplinary environments.
Familiar with major compliance frameworks (ISO 27001, SOC 2, PCI DSS) and skilled in policy management, risk assessments, and vendor compliance reviews.