> Markdown version of [/jobs/ext/4622020-infosec-or-grc-leader](https://www.wearedevelopers.com/jobs/ext/4622020-infosec-or-grc-leader). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Infosec or GRC Leader

- **Company:** Avant
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Security, Information Security Management System
- **Published:** November 7, 2026
- **Apply:** https://www.careerbuilder.com/job-details/infosec-or-grc-leader-san-francisco-ca--018af30b-a774-424d-98bf-df497dafcfd6

## About the Role

* 8-10 Years experience in Information Security, Compliance, Risk Management
 * Expertise in Information Security implementation for ISO 27001 and other relevant standards such as SOX (US role)-NIST 800- 53, CMMC
 * Preferred Certifications: CISSP, ISO 27001 Lead Auditor or Implementer

## Description

* Support implementing and managing Information -Security Management Systems in accordance with ISO27001 standards.
 * Support Risk Management program and co-ordinate Risk assessment activities
 * Enhance existing Common Controls to align with business & customer needs and align with Information security policy and Standards.
 * Coordinate ISMS roll-out efforts to individual business units in scope and support ISO27001 certification effort.
 * Manage compliance and sustaining efforts to maintain Common controls implemented at individual business units.
 * Support Supply Chain and Third-Party Vendor Risk management program activities
 * Help prepare Security Assurance materials for internal and external audiences, including maintaining our Security responses to customer questionnaires.
 * Prepare regular metrics related to Trust office programs, including ISMS, for management updates.
 * Assist with evidence gathering for audits, update centralized GRC tool with audit performance, and perform related compliance activity.
 * Assist in POC and enhancement of GRC tool supporting Trust office objectives.
 * Perform Ad-hoc activities required to support the Trust office.
 * Support ad-hoc meetings /updates in the early morning IST and PST Time Zone.