Related skills
risk management sox gdpr iso 27001 audits📋 Description
- Own and lead the GRC strategy across SOX, ISO 27001, and GDPR
- Design, implement, and maintain SOX control frameworks, docs, testing, and audits
- Build and manage ISMS aligned with ISO 27001
- Ensure GDPR compliance across data processing, including mapping, DPIAs, privacy controls
- Lead internal and external audits; primary point of contact for auditors
- Identify compliance gaps and drive remediation with technical and non-technical teams
- Develop governance policies, procedures, and risk frameworks
- Partner with Engineering and Security to embed controls into systems and SDLC
- Monitor regulatory changes and translate into actionable requirements
🎯 Requirements
- 8+ years in GRC, Risk, Compliance, or IT Audit roles
- Hands-on SOX compliance with design, testing, audit coordination
- ISO 27001 knowledge; experience with ISMS implementation
- Practical GDPR experience in product or corporate env
- Experience with internal and external auditors
- Strong stakeholder management and cross-team communication
- Translate regulatory requirements into scalable processes
- Fluent English
🎁 Benefits
- Experience in SaaS or product-led companies
- Experience in Big 4 or similar audit environments
- Familiarity with cloud environments (AWS, GCP, Azure)
- Security certifications (CISA, CISM, ISO 27001 Lead Implementer/Auditor)
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to Business & Management Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!