信息安全合规协调员
Information Security Compliance Coordinator
信息安全合规协调员
联系发现服务 - 华盛顿特区
地点:远程
开始日期:可协商
一家总部位于华盛顿特区的领先电子发现技术和咨询公司正在寻找一名兼职信息安全合规协调员,支持合规总监处理与ISO 27001、SOC 2和CMMC相关的日常合规工作。该职位主要侧重于行政支持、文档管理、协调以及执行公司信息安全和合规项目中的指定任务。
合格的候选人将协助准备审计材料、收集证据、跟踪合规情况并进行状态报告,确保所需材料准确、及时并按时提交。该职位在指导和既定流程下工作,不涉及合规策略或决策,但对保持合规工作的有序性、按时完成和良好记录起关键作用。
该职位需要与各种内部和外部团队成员合作,包括项目经理、业务发展团队、律师、公司或政府代表以及其他法律人员。这是一项兼职职位(每周25小时),有转为全职的可能。
职位职责:合规与审计支持
- 在合规总监的指导下,支持ISO、SOC 2和CMMC的合规工作
- 协助内部和外部审计准备,包括:
- 收集所需的证据
- 跟踪审计师的要求
- 整理文档以供审查
- 维护合规相关资料,如控制矩阵、证据文件夹、表格和跟踪器
- 跟踪整改事项,并按指示与控制负责人跟进
文档与行政管理
- 按指示更新和维护合规文档、政策、程序和日志
- 管理版本控制,确保文档最新且妥善存储
- 为合规领导准备草案报告、摘要和状态更新
- 维护审计日历、时间线和任务列表
协调与沟通
- 协调与合规和审计相关的会议,包括安排、议程、笔记和行动项跟踪
- 作为常规合规相关请求和信息收集的联络点
- 与内部团队清晰沟通
查看英文原文
Information Security Compliance Coordinator
Contact Discovery Services - Washington, DC
Location: Remote
Start Date: Negotiable
A leading eDiscovery technology and consulting firm headquartered in Washington, DC is looking for a part-time Information Security Compliance Coordinator in the eDiscovery space to support the Director of Compliance with day-to-day compliance-related activities associated with ISO 27001, SOC 2, and CMMC. This role is primarily focused on administrative support, documentation, coordination, and execution of assigned tasks within the company’s information security and compliance programs.
The qualified candidate would assist with audit preparation, evidence collection, compliance tracking, and status reporting, ensuring that the required materials are accurate, up to date, and delivered on time. This role works under direction and established procedures and does not have compliance strategy or decision-making but plays a key role in keeping compliance efforts organized, on schedule, and well-documented.
This position includes working with a variety of internal & external team members including fellow Project Managers, business development team, attorneys, company or government representatives, and other legal staff. This is a part-time position (25 hours per week), with the potential to transition to a full-time role.
DUTIES OF THE POSITION:Compliance & Audit Support
- Support ISO, SOC 2, and CMMC compliance activities under the direction of the Director of Compliance
- Assist with internal and external audit preparation, including:
- Collecting requested evidence
- Tracking auditor requests
- Organizing documentation for review
- Maintain compliance artifacts such as control matrices, evidence folders, spreadsheets, and trackers
- Track remediation items and follow up with control owners as directed
Documentation & Administration
- Update and maintain compliance documentation, policies, procedures, and logs as instructed
- Manage version control and ensure documentation is current and properly stored
- Prepare draft reports, summaries, and status updates for compliance leadership
- Maintain audit calendars, timelines, and task lists
Coordination & Communication
- Coordinate meetings related to compliance and audits, including scheduling, agendas, notes, and action-item tracking
- Serve as a point of contact for routine compliance-related requests and information gathering
- Communicate clearly with internal teams to obtain documentation and updates, escalating issues when needed
Program Support
- Assist with maintaining awareness of compliance requirements across applicable frameworks (ISO 27001, SOC 2, CMMC)
- Support compliance training and awareness activities as directed
- Perform other compliance-related administrative or support tasks as assigned
EXPERIENCE & QUALIFICATIONS:
- 1 – 3 years of experience in a compliance support, audit support, risk, security, IT administration, or similar operational role
- Experience supporting audits, compliance programs, or regulated environments is preferred
- Ability to follow established processes and execute tasks accurately and on time
- Strong organizational and time-management skills
- High attention to detail, especially when handling documentation and evidence
- Ability to manage multiple tasks and deadlines simultaneously
- Strong, clear written and verbal communication skills
- Familiarity with information security or compliance concepts
- Exposure to one or more frameworks such as ISO 27001, SOC 2, NIST, or CMMC is a plus
- Basic understanding of data protection and secure handling of information
- Ability to take direction and execute tasks independently once assigned
- Comfortable working with sensitive and confidential information
- Reliable, methodical, and process-oriented
- Willingness to learn and grow within a compliance function
THE FOLLOWING SKILLS ARE PREFERRED BUT NOT REQUIRED:
· Associate’s or Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, Business, or a related field
- Equivalent combination of education and relevant experience will be considered
Originally posted on Himalayas