Senior Security Compliance Specialist (ISO 27001)

Location: Hybrid position based at the Rochester, New York office, United States

Salary: $90,000–$110,000 per year

Company

hirify.global provides professional services and supports information security, operations, and compliance programs across its organization.

What you will do

• Manage the ISO 27001 and Information Security Management System (ISMS) program in cooperation with Security Operations, IT, Operations, and business leadership.
• Maintain security policies, processes, procedures, ISO 27001 documentation, document control sites, risk registers, and risk treatment plans.
• Coordinate internal and external ISO audits, collect evidence through the GRC platform, and track corrective action plans.
• Establish the ISMS control ownership model, including control owners, performers, approvers, review frequency, evidence requirements, and escalation paths.
• Coordinate ISMS objectives, metrics, KPIs, KRIs, compliance calendars, management reviews, access reviews, supplier reviews, and certification milestones.
• Integrate incident response, business continuity, disaster recovery, crisis management, and physical and digital security activities into the ISMS.

Requirements

• At least seven years of experience in security compliance or audit program management.
• Bachelor’s degree in cybersecurity management, technology compliance, technology program management, auditing, or a related field; directly related experience may substitute.
• Strong understanding of IT infrastructure, networking, security, and software development.
• Strong communication, organization, confidentiality, teamwork, and relationship-building skills.
• Ability to explain and communicate complex technical and compliance information to technical and non-technical audiences.

Nice to have

• PMP, CISSP, auditor, or ISO document control certification.

Culture & Benefits

• Flexible work schedule within a hybrid workplace.
• Health and dental insurance, 401(k) plan with employer match, paid time off, and paid parental leave.
• Short- and long-term disability coverage, profit sharing, and wellness support.
• Fitness and tuition reimbursement, leadership development, and referral bonus programs.
• Team-building and community service events, with a focus on diversity, equity, and inclusion.