Policy and Compliance Lead

To support corporate information security initiatives, the full-time remote Policy and Compliance Lead will develop and implement policies and standards aligned with regulatory requirements while leading compliance assessments and serving as a subject matter expert for business units. Key responsibilities Design, develop, and maintain comprehensive information security policies and procedures that align with industry frameworks and regulatory requirements Lead compliance initiatives, coordinating with cross-functional teams to ensure adherence to laws, regulations, and contractual obligations Drive continuous improvement of the policy management lifecycle, including stakeholder engagement and metrics reporting to leadership Required qualifications Strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, and SOC 2 Proven experience in preparing for and managing IT security audits 3+ years of experience in information security, risk management, compliance, or policy development within a corporate environment Demonstrated ability to translate complex technical and regulatory requirements into clear, actionable policies Strong knowledge of compliance frameworks and ability to translate requirements into actionable controls