Compliance Officer ISO/IEC 27001:2022 and SOC 2

**Job description:** We are seeking a Compliance Officer with expertise in ISO/IEC 27001:2022 and SOC 2 to guide clients through cybersecurity compliance initiatives. This role serves as a trusted advisor, helping organizations prepare for ISO/IEC 27001 certification audits and SOC 2 Type 2 examinations, and helping clients assess, implement, and maintain compliance programs aligned with regulatory, contractual, and customer requirements. Experience with TISAX is a plus, and we will support candidates who are willing to learn it.The Compliance Officer will work directly with clients to conduct assessments, guide policy and documentation development, support ISMS programs, and prepare organizations for external audits and assessments.This is a client-facing consulting role in a fully remote company. It requires strong communication skills, the ability to manage multiple engagements at once, and the ability to translate technical security concepts into practical compliance guidance. No travel is required. **Key Responsibilities** *Client Compliance Support* * Lead client compliance engagements related to ISO/IEC 27001 and SOC 2, and support TISAX engagements as your experience grows. * Conduct compliance gap assessments and readiness evaluations. * Serve as the primary compliance contact for client engagements. * Support clients through external audits and assessments, including coordination with certification bodies, CPA firms, and audit providers, and responses to evidence requests. *Engagement Management* * Manage multiple client engagements at the same time. * Track deliverables, milestones, and deadlines for each engagement. * Lead client meetings and present findings and recommendations to client leadership and other stakeholders. * Work independently in a fully remote consulting environment. *Compliance Documentation* * Help clients draft and maintain security policies, procedures, and compliance documentation. * Prepare security questionnaires, assessment documentation, and audit evidence packages. * Facilitate development of ISMS documentation in collaboration with client stakeholders, including Statements of Applicability, risk assessments, and risk treatment plans. * Assist clients in preparing SOC 2 system descriptions and control matrices. * Assist clients in preparing and reviewing VDA ISA self-assessments for TISAX. * Use GRC or compliance management systems to track controls and evidence. *Risk & Compliance Advisory* * Identify compliance gaps and provide actionable remediation guidance. * Help clients build sustainable governance and compliance programs. * Explain how technical controls support compliance requirements and risk mitigation. * Maintain a working knowledge of security technologies, including endpoint protection, IAM, SIEM, vulnerability management, encryption, and monitoring tools. **Qualifications** *Required* * 2+ years of experience in cybersecurity compliance, risk management, or governance. * Demonstrated experience leading or substantially supporting client compliance engagements. * Hands-on experience with ISO/IEC 27001 or SOC 2 Type 2. Experience with both is preferred. Candidates with experience in one must be willing to build expertise in the other. * Experience conducting assessments, gap analyses, or audit preparation. * Strong documentation and policy-writing skills. * Willingness to learn TISAX and the VDA ISA. * Must be based in the United States. *Preferred* * Hands-on experience with both ISO/IEC 27001 and SOC 2 Type 2. * Experience with TISAX, including the VDA ISA, assessment objectives, assessment levels, and the ENX assessment process. * Familiarity with GRC or compliance management tools. * Knowledge of other frameworks such as NIST SP 800-171, the CMMC Program, NIST CSF, HIPAA, or GDPR. * Bachelor’s degree in cybersecurity, information technology, business, or a related field. Equivalent professional experience is also considered. * Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or Security+. **Benefits:** * 401(k) * Dental insurance * Flexible schedule * Health insurance * Paid time off * Vision insurance **Work Location:** Remote Pay: $70,000.00 - $90,000.00 per year Benefits: * 401(k) * Dental insurance * Flexible schedule * Health insurance * Paid time off * Vision insurance Work Location: Remote