risk managementgrciso 27001auditsoxtisaxcmmcnis2compliance program management
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$115к$155кмедиана$190к
49 в выборке
84
Хорошая вакансия
развернуть
У роли понятная зона ответственности senior-уровня и работа с несколькими признанными стандартами; главный нюанс - широкий объем задач сразу по нескольким направлениям комплаенса.
Кликните для подробной информации
Широкая зона ответственностиПонятные обязанностиЦенный опыт
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Compliance Specialist (Digital Technology Risk & Compliance): Managing a multi-framework compliance program covering SOX, TISAX, CMMC, NIS2, and ISO 27001 with an accent on governance, audit coordination, control testing, and remediation tracking. Focus on mapping controls across frameworks, coordinating evidence and certifications, and providing leadership with clear compliance posture reporting.
Location: Hybrid, Wilmington, Delaware, United States
Company
hirify.global develops materials and solutions for advanced electronics and high-tech industries.
What you will do
Support the Digital Technology compliance program, including its operating model, annual plan, compliance calendar, performance indicators, dashboards, governance meetings, and action-item tracking.
Coordinate SOX 404 IT compliance activities covering IT general controls, IT application controls, automated controls, testing, evidence collection, deficiencies, and remediation.
Plan, govern, and report on compliance across SOX, TISAX, CMMC, NIS2, and ISO 27001.
Use the Unified Controls Framework to map and rationalize controls, reducing duplicate testing and evidence requests.
Partner with business, IT, Legal, Security, Internal Audit, Finance, HR, facilities, engineering, and operations teams to embed compliance requirements.
Monitor corrective actions, escalate overdue or high-risk items, support awareness and training, and identify process improvements through GRC tools and automation.
Requirements
Bachelor’s degree required; Information Security, Risk Management, or a related field preferred.
8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs preferred.
Experience with one or more of SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
Knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 for assessing compliance and driving remediation.
Experience coordinating audits, assessments, and certifications from planning and evidence collection through findings remediation.
Ability to communicate clearly and compellingly, analyze issues, plan compliance commitments, collaborate across functions, influence stakeholders without direct authority, and maintain current knowledge of regulatory and cybersecurity requirements.
Nice to have
Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer.
Experience with GRC tools such as Optro, OneTrust, or ServiceNow.
Culture & Benefits
Hybrid work arrangement in Wilmington, Delaware.
Cross-functional collaboration across business, technology, legal, security, audit, finance, and operations.
Comprehensive pay and benefits package.
Equal opportunity employment and reasonable accommodation support for applicants.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →