Compliance Specialist

Remote role (Wilmington, DE area preferred) starting ASAP for a 6-month contract with potential conversion.

About the role

The Compliance Specialist supports and manages regulatory, cybersecurity, and certification compliance programs across multiple frameworks and jurisdictions, partnering with cross-functional teams to translate complex obligations into practical business controls.

Responsibilities

• Support development, implementation, and continuous improvement of the enterprise compliance program, including obligations inventory, risk registers, and compliance roadmaps.
• Lead TISAX gap assessments, coordinate remediation efforts, and maintain ISA documentation and evidence repositories for automotive security compliance.
• Support CMMC and NIST SP 800-171 implementation, including control assessments, SSP and POA&M documentation, and cybersecurity control monitoring.
• Assess organizational readiness against NIS2 and other regional cybersecurity regulations, and communicate compliance impacts to legal, security, and business stakeholders.
• Support ISO 27001 ISMS implementation and maintenance, including risk assessments, control reviews, internal audits, and corrective action monitoring.
• Coordinate SOX 404 ITGC, ITAC, and automated control testing, evidence collection, deficiency tracking, and remediation in partnership with Internal Audit, External Audit, Finance, and IT.
• Manage compliance governance meetings, reporting, and management reviews while serving as a key liaison for internal and external auditors.

Requirements

• Bachelor's degree in Information Security, Risk Management, or a related field.
• 5-7 years of hands-on experience in compliance, risk management, audit, governance, information security, or regulatory compliance.
• Direct experience supporting one or more frameworks including CMMC, TISAX, SOX, ISO 27001, NIS2, or GDPR.
• Must have TISAX experience.
• Demonstrated ability to manage stakeholder relationships across finance, legal, procurement, IT, and operational business functions.
• Proven experience coordinating with external auditors and managing audit evidence and remediation activities.

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent.
• Background in manufacturing or semiconductor industry compliance environments.
• Experience supporting certification programs as a first-time organizational initiative.
• Familiarity with SOC 2 or adjacent information security frameworks as supplementary experience.

Pay

$65–75/hr W2

Benefits

• Eligible for Health, Dental, Vision, and 401K