Cybersecurity Assurance & Compliance Specialist at Hire Resolve

Job Description

• We are looking for a Cybersecurity Assurance & Compliance Specialist to lead and support information security governance, risk management, compliance and security assurance activities across the organisation.
• The successful candidate will be responsible for maintaining and advancing security certification programmes, including SOC 2 Type II, CMMC Level 2 and ISO/IEC 27001, while ensuring continuous audit readiness and compliance with applicable regulatory and customer requirements.

Minimum Requirements

• Minimum 5 years’ experience in cybersecurity, information security, IT audit, risk management, governance or compliance.
• Minimum 3 years’ direct experience supporting one or more of the following:
• SOC 2
• ISO/IEC 27001
• CMMC
• NIST 800-171
• Internal or external audits
• Security certification programmes
• Experience managing compliance documentation, evidence collection and audit coordination.
• Experience conducting risk assessments and maintaining risk registers.
• Experience responding to customer cybersecurity questionnaires and security assessments.
• Strong understanding of cybersecurity Governance, Risk & Compliance (GRC).
• Proficiency in Microsoft 365, including Teams, Word, Excel, PowerPoint and SharePoint.
• Strong written and verbal communication skills.
• Bachelor’s degree in Information Security, Cybersecurity, IT, Risk Management, Business Administration or a related field preferred.
• Relevant professional certifications and equivalent experience may be considered.

Key Responsibilities

• Lead and coordinate SOC 2 Type II, CMMC Level 2 and ISO/IEC 27001 compliance and audit activities.
• Maintain audit readiness programmes and compliance roadmaps.
• Coordinate internal and external assessments, audits and certification engagements.
• Manage evidence collection, control validation and remediation activities.
• Maintain and manage the enterprise cybersecurity risk register.
• Conduct cybersecurity risk assessments across systems, applications, cloud environments and third-party vendors.
• Coordinate risk mitigation and remediation plans.
• Manage customer security questionnaires, assessments and security requirements.
• Develop and maintain security policies, standards and procedures.
• Support third-party risk management and vendor security reviews.
• Prepare cybersecurity risk dashboards, metrics and reports for leadership.
• Track compliance metrics and audit findings through to completion.
• Support security awareness and compliance training initiatives.
• Drive continuous improvement of governance, risk and compliance practices.