Back
Medium — specialized security compliance skills but metro mid-level role attracts moderate applicants.
High — domain-specific compliance and regulatory expertise (PCI, HIPAA, SOC2) limits cross-industry interchangeability.
High — explicit 6+ years requirement plus mandatory certifications and hands-on compliance controls.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Lead and manage security compliance certifications and audits including ISO 27001, SOC 2, PCI DSS, HIPAA/HITRUST, ensuring alignment of security controls across corporate environments.
Perform internal audits, risk assessments, and vendor security assessments to identify gaps, remediation, and compliance status, and report findings and progress to leadership.
Develop and enforce security policies and procedures and provide compliance training and incident response support during security events.
Bachelor’s degree in MIS/Computer Science or Business, or equivalent relevant experience.
6+ years of experience in IT/IS Security Compliance or Consulting with at least 3 years focused on IT security, audit, risk and vendor assessments.
Proven expertise with compliance standards: PCI DSS, SOC 2, HIPAA/HITRUST, SOX ITGC, ISO 27001 and related ISO streams.
Mandatory hands-on experience with application security controls, cloud architecture, network and infrastructure security, and security tools like SIEM, NAT, VA/PT endpoints.
Experienced in managing complex compliance frameworks and leading certification engagements within large corporate or BPO environments.
Strong technical and risk assessment skills across enterprise, network, system, and application levels with the ability to handle cross-functional risk collaboration.
Holds one or more recognized information security certifications (e.g., CISSP, CISA, CISM, CEH, ISO LA/LI) and demonstrates capability in technical documentation and communication.