Cyber Security Architect – ISO/IEC 27001 & GRC Specialist

About the role

We are seeking a mature, proactive Cyber Security Architect to lead and own our information security, governance, risk and compliance (GRC) initiatives. The role operates independently as an individual contributor, ensuring security, compliance, and audit activities are executed with minimal supervision.

Key responsibilities

• Manage and support cyber security initiatives aligned with ISO/IEC 27001:2022 and internal security requirements.
• Handle GRC activities, including risk management, control assessments, compliance monitoring, and remediation tracking.
• Prepare evidence for internal and external audits, address findings, and coordinate remediation.
• Lead incident response: investigation, documentation, escalation, root‑cause analysis, and corrective actions.
• Support SOX compliance and related IT controls and governance.
• Assess and monitor cloud security across AWS, Microsoft Azure, and Google Cloud platforms.
• Implement and maintain privacy and data‑protection controls.
• Conduct security risk assessments, identify control gaps, and recommend mitigations.
• Maintain and improve ISMS documentation, policies, procedures, standards, and controls.
• Coordinate with technical teams and stakeholders to ensure effective implementation of security and compliance requirements.
• Stay current on emerging threats, regulatory changes, industry standards, and best practices.

Required profile

• 8+ years of relevant cyber security experience (10 years total professional experience preferred).
• Strong practical experience across technical security, GRC, ISO/IEC 27001, incident management, risk management, and audit processes.
• Hands‑on knowledge of ISO/IEC 27001:2022 implementation.
• Good understanding of SOX, SOC, internal audit, privacy, and cloud security requirements.
• Ability to work independently with minimal supervision.
• Excellent analytical, problem‑solving, documentation, communication, and stakeholder‑management skills.
• Mature, professional approach to handling sensitive security and compliance matters.

Required skills

• ISO/IEC 27001:2022
• Governance, Risk & Compliance (GRC) frameworks
• SOX compliance
• Incident management
• Risk management
• Audit coordination (internal & external)
• Cloud security – AWS, Microsoft Azure, Google Cloud