Cyber Security Specialist - Assurance & Compliance

Our client is seeking a Remote Cyber Security Specialist - Assurance & Compliance to provide independent measurement, assessment, and reporting of cybersecurity compliance across the organization. This role will ensure IT and OT environments align with corporate cybersecurity policies, regulatory requirements, industry frameworks, and contractual obligations. The individual will partner closely with cybersecurity, legal, procurement, and business stakeholders to develop and maintain compliance programs, perform ongoing assessments, identify gaps, and drive remediation efforts through closure. Responsibilities include managing regulatory mappings, leading internal and external audit activities, overseeing evidence collection and control testing, maintaining assurance findings, coordinating with risk teams, and supporting major IT and OT transformation initiatives through assurance planning and validation testing. The role will also be responsible for developing compliance training and awareness programs, reporting on cybersecurity control effectiveness, and coordinating external assessments such as penetration testing and red team exercises. This person can sit fully remote. If they are local to Houston the manager would request 2 days onsite.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field.

• 7+ years of experience in IT audit, cybersecurity assurance, compliance, governance, or related cybersecurity functions.

• IT and OT experience - will act as focal point on major projects where high assurance is required per policies and standards, to define assurance controls and criteria to be implemented

• Familiarity with regulatory requirements such as SOX, GDPR, CCPA, NERC CIP, TSA Security Directives, or other industry-specific compliance standards

• Knowledge of GRC platforms such as ServiceNow GRC, Archer, AuditBoard, or MetricStream.

Experience with cybersecurity frameworks such as NIST

• Strong knowledge of cybersecurity frameworks, controls, audit practices, compliance requirements, risk assessment, and vendor assurance. Strong communication, stakeholder management, and problem-solving skills.