InfoSec Compliance Operations Specialist

Responsibilities

• Support the implementation and ongoing operation of Information Security governance, compliance, and ISMS activities
• Maintain compliance documentation, control matrices, risk registers, evidence repositories, corrective-action trackers, and related records
• Collect, review, organize, and maintain evidence for ISO/IEC 27001, PCI DSS, internal audits, external assessments, and certification activities
• Support the preparation, review, publication, version control, and periodic update of Information Security policies, standards, procedures, and guidelines
• Track compliance gaps, audit findings, risk-treatment actions, remediation activities, responsible owners, and completion deadlines
• Support internal and external audits, readiness assessments, control reviews, and certification activities
• Prepare compliance reports, audit updates, policy summaries, risk documentation, meeting materials, and management-review content
• Assist with maintaining the Information Security risk register, control inventory, Statement of Applicability, and supporting documentation
• Support customer security questionnaires, third-party assessments, and routine coordination with IT, Legal, Procurement, Compliance, and business teams
• Follow up with responsible stakeholders on outstanding evidence, document reviews, corrective actions, and compliance deadlines

Languages