ISO27001 Compliance Analyst

Location: Carlsbad, California, United States; ability to travel up to 40%; US citizenship required

Salary: $147,000–$232,000 annually. For specific locations in San Jose, the San Francisco Bay Area, and the New York City metropolitan area: $183,000–$274,000 annually.

Company

hirify.global delivers satellite and communications services for consumers, businesses, governments, and military customers worldwide.

What you will do

• Maintain continuous compliance with the ISO 27001:2022 framework and facilitate ISMS activities as a second line of defense.
• Implement, assess, and audit security practices, technical configurations, and control effectiveness across product lines and technologies.
• Lead ownership of security controls across all ISO 27001 Annex A requirements and resolve information security and data issues.
• Develop and automate security, risk, and compliance documentation, including exceptions and alternative controls.
• Lead internal audits and coordinate external certification reviews, including scheduling, execution, follow-up, and auditor communication.
• Perform risk assessments and develop performance metrics to measure and improve program effectiveness.

Requirements

• 8+ years of experience in risk and compliance, including 8+ years working with ISO 27001:2022 audits and/or control implementation.
• ISMS Lead Auditor or Lead Implementer certification, or the ability to obtain certification after hire.
• Experience preparing development teams for IT framework controls and working with GRC tools.
• Strong understanding of enterprise security laws, regulations, governance, infrastructure, networking, security, endpoint, cloud, and on-premises technologies.
• Strong analytical, administrative, interpersonal, written, and verbal communication skills, with the ability to lead multiple projects.
• US citizenship required; willingness to travel up to 40%.

Nice to have

• BA or BS degree or equivalent experience in a related field.
• CISA, CIA, CISM, CISSP, SANS, CPA, or similar security and audit certifications.
• Experience auditing PCI DSS, NIST SP 800-171, CMMC, or IT SOX.
• Project management experience and strong teamwork and problem-solving skills.

Culture & Benefits

• Work within a global security organization serving multiple product lines and technologies.
• Medical, financial, and other benefits may be provided depending on the position.
• Additional cash or stock incentives may be included in the compensation package.
• Equal opportunity employment and an inclusive workplace.