waypointjobs

Kelly Services

Compliance Lead / SOC2 / ISO 27001 / hybrid onsite in Herndon, VA

herndon, VA

Check who can apply and the requirements below before continuing.

This job is closed

Applications are no longer available for this announcement. Explore current related opportunities below.

Job description

$ - $

A global leader in energy storage optimization is seeking a Cybersecurity & Compliance Lead to join its team in Herndon, VA (hybrid, 2-3 days onsite). This is a full-time leadership opportunity focused on building and maturing cybersecurity, compliance, and risk management capabilities across a rapidly growing, mission-driven technology organization.

This is a highly visible, hands-on role for a security professional who enjoys building programs rather than simply maintaining them. The successful candidate will own and evolve the organization's cybersecurity and compliance strategy, drive ISO 27001 and SOC 2 readiness efforts, strengthen vendor risk management processes, and guide incident response and risk assessment activities. With direct influence on business and security decisions, this position offers the opportunity to make a meaningful impact on critical energy infrastructure while helping accelerate the transition toward a more sustainable future.

Required Skills & Experience

7+ years of experience in cybersecurity, information security, governance, risk, and compliance (GRC), or related domains

Experience leading or managing cybersecurity and compliance programs in a hands-on capacity

Strong knowledge of ISO 27001, SOC 2, and security control frameworks

Experience conducting risk assessments and developing mitigation strategies

Vendor risk management and third-party security assessment experience

Expertise creating, implementing, and maintaining information security policies and standards

Experience developing and executing incident response processes and plans

Knowledge of security monitoring, control validation, and continuous compliance practices

Understanding of cloud security principles and modern IT infrastructure

Strong stakeholder management and communication skills

Ability to balance security requirements with operational and business objectives

Experience working in lean or fast-paced environments where ownership and execution are critical

Desired Skills & Experience

Experience in energy, utilities, critical infrastructure, industrial technology, or highly regulated environments

CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar certifications

Familiarity with NIST CSF, NIST 800-53, or related security frameworks

Experience supporting customer security reviews and audit requests

Knowledge of OT/ICS security principles

Experience with vulnerability management and security tooling oversight

Background supporting SaaS platforms or cloud-native environments

Strong program-building and process-improvement experience

What You Will Be Doing Tech Breakdown

35% Security Governance, Risk & Compliance (ISO 27001, SOC 2, Controls)

25% Risk Management & Vendor Security Assessments

15% Incident Response & Security Operations Oversight

15% Policy Development & Security Program Maturation

10% Strategic Security Planning & Stakeholder Engagement

Daily Responsibilities

30% Lead and enhance cybersecurity and compliance initiatives

20% Conduct risk assessments and remediation planning

15% Manage third-party/vendor risk reviews

15% Develop, maintain, and improve security policies and procedures

10% Coordinate incident response readiness and security monitoring activities

10% Partner with internal stakeholders to drive security improvements and compliance objectives

The Offer

High-impact leadership role with significant ownership and visibility

Opportunity to build and shape a cybersecurity program from the ground up

Direct involvement in protecting technology that supports renewable energy and critical infrastructure

Comprehensive benefits package including medical, dental, and vision coverage

401(k) with company match

Paid vacation and holidays

Professional development and certification support

Opportunity to work alongside industry experts helping drive the future of sustainable energy and technology

#LI-CK2

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.

#J-18808-Ljbffr

Worksite address

herndon, VA, 22070, US

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.

Explore related searches

Current related jobs