Lead Cyber Certifications

About the role

This role supports and executes global cyber assurance activities, including ISO/IEC 27001 certification, SOC 2 reporting, customer cybersecurity audits and Internal Audit support. It coordinates audit readiness, manages evidence, tracks remediation and ensures consistent execution of cyber compliance requirements across a global environment. The position also serves as a key North America point of contact, partnering with regional stakeholders while aligning to global processes.

Key responsibilities

• Certifications and external assessments: support ISO/IEC 27001 certification (readiness, evidence, internal audit, remediation), take part in SOC 2 Type I and Type II engagements, act as day-to-day liaison with external auditors and maintain audit documentation.
• Customer audits and security assessments: prepare and respond to customer cybersecurity audits and due diligence, coordinate with Sales, Legal and IT, and track findings and remediation.
• Internal Audit support: support information security and IT control audits, document findings, management responses and remediation plans, and align internal audit with external certification requirements.
• Compliance operations: maintain centralized audit evidence repositories, trackers and dashboards, support AuditBoard or similar GRC platforms, and identify efficiency improvements.

Required profile

• Bachelor's degree in Information Security, Information Systems, Risk, Compliance or a related field.
• 6-8 years of experience in information security compliance, audit support or cyber risk management.
• Practical experience with ISO/IEC 27001, SOC 2, customer security audits, internal audit and cross-functional global stakeholder work.
• Strong organizational skills to manage multiple audits and deadlines at once.

Preferred qualifications

• Familiarity with frameworks such as ISO 27001, NIST, SCF, PCI, FedRAMP and/or CMMC.
• AuditBoard (including CrossComply) experience and internal or external audit background.
• CISA, CISSP, CRISC or ISO 27001 Lead Implementer/Auditor certification.