Information Security Compliance Lead

Information Security Compliance Lead

We are seeking a highly experienced Information Security Compliance Lead. This role supports the organization globally and is responsible for driving key functions within the enterprise security compliance program. You will help to drive the strategy, execution, and continuous maturity of the global Compliance program, ensuring alignment with regulatory requirements and internal policy obligations. This role requires a seasoned practitioner with expertise in managing complex, multi-environment compliance programs.

Key Responsibilities

• Lead the global cybersecurity compliance program, including strategy, governance, and roadmap development.
• Direct enterprise compliance activities across frameworks such as PCI, SOX, GDPR, SWIFT, NIST CSF, and ISO 27001/27002.
• Oversee the design, implementation, and testing of cybersecurity controls across various environments.
• Direct the end-to-end audit and assessment lifecycle, from planning and scoping to testing and closure.
• Lead remediation of cybersecurity, audit, and compliance findings through root cause analysis and corrective action planning.
• Translate compliance insights into practical recommendations to inform team priorities and business decisions.
• Engage with technical and business teams to ensure accountability for control ownership and remediation of compliance deficiencies.
• Analyze and report globally on compliance and remediation trends, producing actionable reporting for continuous improvement.

Required Qualifications

Experience:

• 7+ years of experience in cybersecurity risk, compliance, or a related function.
• 5+ years working in regulatory assessments and requirements.
• Experience managing a team of 2+ personnel.
• Strong expertise across cloud (AWS, Azure, GCP), on-premises, and application environments.

Education &

Certifications:

• Bachelor's degree in computer science, business administration, Engineering, IT, or a related technical field.
• Certifications such as CISA, CISSP, CISM, or CRISC.

Technical

Skills:

• Experience with GRC tools, Service Now, and cloud technologies.
• Knowledge of risk frameworks such as NIST, ISO, PCI, and SOX.
• Experience with vulnerability remediation tracking, reporting, and dashboarding.

Preferred Qualifications

• One or more of the following certifications: CISSP, CRISC, CISA.
• 5+ years of prior experience in a related field; media or entertainment industry experience is a plus.
• Familiarity with streaming and similar products or services.
• 5+ years of Big 4 experience or in a related field.
• Experience working in a national or global company.
• Risk mitigation experience with AWS and/or other Cloud Databases such as Azure, GCP.
• Knowledge of metrics and visualization tools such as Power BI or Tableau.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including Clearly Rateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.