Details.
Help clients validate their security by running risk assessments and building compliance programs across frameworks including ISO/IEC 27001, PCI DSS, and GDPR. Responsibilities include information security risk assessments, gap analyses, compliance programs, governance frameworks, and decision-ready reporting. Applicants should have working fluency across major security and privacy frameworks, the ability to turn requirements into actionable steps, and a consultative style. CISA, CISM, CRISC, or CISSP is required, and an ISO/IEC 27001 credential is an asset.