Information Security Compliance Lead

Everforth Apex
Atlanta, GA, United States
16 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Microsoft Azure Cloud Computing Cloud Database Data Visualization Power BI Smartsuite Tableau (Software) Software Vulnerability Management Google Cloud Swift (Programming Language) Information Technology
+1 more
Servicenow

Job description

  • Lead the global cybersecurity compliance program, including strategy, governance, and roadmap development.
  • Direct enterprise compliance activities across frameworks such as PCI, SOX, GDPR, SWIFT, NIST CSF, and ISO 27001/27002.
  • Oversee the design, implementation, and testing of cybersecurity controls across various environments.
  • Direct the end-to-end audit and assessment lifecycle, from planning and scoping to testing and closure.
  • Lead remediation of cybersecurity, audit, and compliance findings through root cause analysis and corrective action planning.
  • Translate compliance insights into practical recommendations to inform team priorities and business decisions.
  • Engage with technical and business teams to ensure accountability for control ownership and remediation of compliance deficiencies.
  • Analyze and report globally on compliance and remediation trends, producing actionable reporting for continuous improvement.

Requirements

  • 7+ years of experience in cybersecurity risk, compliance, or a related function.
  • 5+ years working in regulatory assessments and requirements.
  • Experience managing a team of 2+ personnel.
  • Strong expertise across cloud (AWS, Azure, Google Cloud Platform), on-premises, and application environments.

Education & Certifications:

  • Bachelor’s degree in computer science, business administration, Engineering, IT, or a related technical field.
  • Certifications such as CISA, CISSP, CISM, or CRISC.

Technical Skills:

  • Experience with GRC tools, ServiceNow, and cloud technologies.
  • Knowledge of risk frameworks such as NIST, ISO, PCI, and SOX.
  • Experience with vulnerability remediation tracking, reporting, and dashboarding., * One or more of the following certifications: CISSP, CRISC, CISA.
  • 5+ years of prior experience in a related field; media or entertainment industry experience is a plus.
  • Familiarity with streaming and similar products or services.
  • 5+ years of Big 4 experience or in a related field.
  • Experience working in a national or global company.
  • Risk mitigation experience with AWS and/or other Cloud Databases such as Azure, Google Cloud Platform.
  • Knowledge of metrics and visualization tools such as Power BI or Tableau.

About the company

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:03 min

Platform compliance and security certifications for sensitive data

Chad Carlson · World Congress 2021

56 sec

Integrating automated approval workflows into the portal

Markus Eisele Markus Eisele · World Congress 2025

1:24 min

Moving the semantic layer upstream to avoid vendor lock-in

Piotr Menclewicz Piotr Menclewicz · Europe 2026 Virtual

2:27 min

Establishing a simulated technical environment for the workflow demo

Tobias Dunn-Krahn · LIVE

3:48 min

Standardizing data access schemas with OData

Florian Bader Florian Bader · World Congress 2026 Europe

1:44 min

Background and career journey in regulated software systems

Martin Hynie · Coffee With Developers

Videos

See all

Related articles

See all