Compliance Officer

About the Role
This position is pivotal for ensuring the organization complies with various standards and frameworks, including ISO 27001, NIST, and GDPR. The role involves implementing and maintaining these compliance standards while developing security policies and conducting internal and external audits. You will coordinate with stakeholders, conduct risk assessments, and prepare compliance reports to support the organization’s governance framework.

Responsibilities

• Standards Implementation: Implement and maintain compliance with ISO 27001, NIST, GDPR, and other frameworks.
• Policy Development: Draft, update, and enforce security policies and procedures.
• Audit Management: Conduct internal audits and support external audits and certification processes.
• Risk Assessment: Perform compliance gap analysis and risk assessments to identify vulnerabilities.
• Governance Reporting: Prepare compliance reports, audit findings, and corrective action plans.
• Awareness Programs: Conduct security awareness sessions to ensure adherence to compliance requirements.
• Stakeholder Coordination: Liaise with regulators, auditors, and internal teams to maintain compliance posture.

Requirements

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related discipline.
• Minimum 8+ years of experience in compliance, governance, and IT security.
• Proven track record in implementing compliance frameworks and managing audits.

Certifications

• CISA (Certified Information Systems Auditor).
• CISM (Certified Information Security Manager).
• ISO 27001 Lead Implementer / Auditor.