> Markdown version of [/jobs/ext/3969609-it-internal-compliance-specialist](https://www.wearedevelopers.com/jobs/ext/3969609-it-internal-compliance-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Internal Compliance Specialist - **Company:** The Lubrizol Corporation - **Location:** Wickliffe, OH, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, System Configuration, Data Security, Network Security, Screenshots, Software Vulnerability Management, Tisax, Data Logging, Information Security Management System, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, CIS Benchmarks - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/it-internal-compliance-specialist-wickliffe-oh--8c398145-51b0-4dec-9abe-fd3999a4b74f ## About the Role Sustainability, Chemistry, Medical Products, Water Use Efficiency, ISO (International Organization for Standardization), Information/Data Security (InfoSec), Risk Management, Security Compliance, Auditing, Maintain Compliance, * Bachelor's degree in Information Security, Information Technology, Computer Science, Accounting, or a related field. * 2+ years of experience in IT security auditing, compliance, information security, or governance, risk, and compliance (GRC) roles. * Understanding of ISO 27001/27002, Annex A controls, risk management requirements, or audit methodologies. * Familiarity with information security domains including access control, network security, vulnerability management, encryption, logging, and secure configurations. * Knowledge of frameworks such as the NIST Cybersecurity Framework (NIST CSF), CIS Controls, Information Technology General Controls (ITGCs), or ISO 31000 concepts. * Ability to review evidence such as system configurations, screenshots, logs, and diagrams for compliance validation. * Strong analytical, documentation, critical-thinking, and communication skills. * Ability to explain audit findings to technical and non-technical stakeholders. * Strong organizational skills with the ability to manage multiple concurrent priorities. * Growth mindset and commitment to developing expertise in ISO 27001, TISAX, and broader GRC disciplines. Preferred Qualifications that Drive You Forward * ISO 27001 Lead Auditor or ISO 27001 Lead Implementer certification. * Certified Information Systems Auditor (CISA) certification. * Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM) certification. * Knowledge of TISAX and VDA ISA control domains, including information security, prototype protection, and data protection. * Experience supporting security compliance, audit readiness, and remediation programs in global environments. ## Description As an IT Internal Compliance Specialist (ISO 27001 + TISAX), youll be at the forefront of our innovation, driving information security compliance, governance, risk management, and audit readiness initiatives that strengthen our global security posture. Youll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing, and enhance modern life. In this role, you will: * Lead and execute internal compliance reviews aligned with ISO 27001, TISAX, VDA ISA control domains, and internal security requirements. * Evaluate the design and operating effectiveness of technical, administrative, and physical information security controls. * Prepare compliance scopes, testing plans, sampling guidance, evidence requests, and audit documentation. * Document findings, risks, and recommended corrective actions in a clear and structured format. * Partner with control owners to track remediation efforts, validate corrective actions, and sustain compliance. * Support Information Security Management System (ISMS) maintenance and audit readiness activities. * Coordinate evidence collection and stakeholder engagement for external audits and assessments. * Participate in IT risk management activities and help identify, assess, and document security risks. * Support third-party risk reviews, policy compliance assessments, and governance reporting activities. * Contribute to continuous improvement initiatives, security metrics, compliance dashboards, and audit automation efforts.