ISO Risk Management Director

Owning the execution of critical governance, risk, and compliance initiatives, the full-time salaried ISO 27001 Risk Management Director will manage external auditor relationships, oversee SOC 1 and SOC 2 audits, and lead ISO 27001 certification efforts in a remote environment. Key responsibilities Own end-to-end execution of SOC 1 and SOC 2 Type II audits, including scoping, evidence collection, and remediation tracking Lead the ISO 27001:2022 audit readiness and certification process, managing relationships and coordinating evidence Build and operate the enterprise risk register, conducting assessments and maintaining updates across business units Required qualifications 8-12+ years of experience in GRC, IT audit, or enterprise risk management with direct ownership of SOC 1/SOC 2 audits ISO 27001 Lead Implementer certification with credentialed implementation experience Working knowledge of SOX ITGC requirements in a publicly traded company Experience building an enterprise risk register and KRI/KPI reporting framework for executive audiences Strong management of POA&M and remediation lifecycle across cross-functional teams