Policy and Compliance Lead - USA Remote

About the role

This role will provide business-aligned guidance focused on governance, compliance, and operational risk management. You will partner with leaders, compliance stakeholders, and cross-functional teams to translate complex issues into practical recommendations. The position offers the opportunity to strengthen responsible execution, improve decision-making, and support sustainable growth within a Business Services environment.

Responsibilities

• Design and maintain information security policies and procedures aligned with industry standards
• Lead compliance initiatives, coordinating audits and assessments across teams
• Act as a subject matter expert in policy interpretation and risk mitigation
• Drive improvements in policy management and stakeholder engagement processes
• Collaborate with legal and technology teams to convert compliance requirements into solutions

Qualifications

• Strong knowledge of regulatory frameworks like ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, or PCI DSS
• Ability to translate complex regulatory requirements into actionable policies
• Experience in managing IT security audits such as SOC 2, ISO 27001, PCI DSS
• 3+ years in information security, risk management, compliance, or policy development
• Familiarity with governance, risk, compliance (GRC) platforms and security automation tools

Benefits

• Flexible remote work arrangements
• Paid time off
• Medical, dental, and vision insurance
• 401(k) plan

Pay

$130,000 – $160,000 annually

Schedule

Remote - US based candidates only, no visa sponsorship available