Program Manager-Security Operations & Compliance

Maintain and develop Anovia's ISO/IEC 27001 ISMS including policies, controls, risk management, evidence, and continuous improvement.

Coordinate internal and external audit activities for ISO 27001, SOC 2, HIPAA, and other compliance programs including evidence preparation and action tracking.

Lead or coordinate technical and operational security initiatives from scoping through implementation, such as security tooling, vulnerability management, and NOC/SOC capability development.

4+ years experience in information security, IT compliance, GRC, or security operations.

Practical experience with ISO/IEC 27001, SOC 2, or comparable security compliance frameworks including audit participation and policy/control development.

Working knowledge of Microsoft 365 security environment (Microsoft Defender, Intune, Entra ID) and GRC processes and tools.

Bachelor's degree in Information Security, Computer Science, IT, or related field, or equivalent practical experience.

Experienced in managing end-to-end security audit/certification processes with strong coordination and communication skills across technical and business teams.

Capable of taking ambiguous technical or operational initiatives and delivering structured, planned outcomes driving projects to completion.

Comfortable interfacing with auditors, leadership, vendors, and diverse stakeholders on security and compliance matters.