IT Internal Compliance Specialist

Select how often (in days) to receive an alert:
Create Alert

Shape the Future with Us.

At Lubrizol, we’re bringing to life the chemistry behind clean water, efficient transportation, reliable infrastructure, critical medicines, and the products people rely on every day through science, sustainability, and a culture of inclusion.

As part of our global team, you’ll be empowered to make a real impact - on your career, your community, and the world around you.

Job Title: IT Internal Compliance Specialist

Location:Wickliffe, OH or Deer Park, TX

Job Type:Full-time, Hybrid:
Collaborate in-office 4 days each week, with 1 flexible day from home

How You’ll Make an Impact

As an IT Internal Compliance Specialist (ISO 27001 + TISAX), you'll be at the forefront of our innovation, driving information security compliance, governance, risk management, and audit readiness initiatives that strengthen our global security posture. You'll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing, and enhance modern life. In this role, you will:

Lead and execute internal compliance reviews aligned with ISO 27001, TISAX, VDA ISA control domains, and internal security requirements.

Evaluate the design and operating effectiveness of technical, administrative, and physical information security controls.

Prepare compliance scopes, testing plans, sampling guidance, evidence requests, and audit documentation.

Document findings, risks, and recommended corrective actions in a clear and structured format.

Partner with control owners to track remediation efforts, validate corrective actions, and sustain compliance.

Support Information Security Management System (ISMS) maintenance and audit readiness activities.

Coordinate evidence collection and stakeholder engagement for external audits and assessments.

Participate in IT risk management activities and help identify , assess, and document security risks.

Support third-party risk reviews, policy compliance assessments, and governance reporting activities.

Contribute to continuous improvement initiatives, security metrics, compliance dashboards, and audit automation efforts.

Required Qualifications that Enable Your Success

Bachelor’s degree in Information Security , Information Technology, Computer Science, Accounting, or a related field.

2+ years of experience in IT security auditing, compliance, information security, or governance, risk, and compliance (GRC) roles.

Understanding of ISO 27001/27002, Annex A controls, risk management requirements, or audit methodologies.

Familiarity with information security domains including access control, network security, vulnerability management, encryption, logging, and secure configurations.

Knowledge of frameworks such as the NIST Cybersecurity Framework (NIST CSF), CIS Controls, Information Technology General Controls (ITGCs), or ISO 31000 concepts.

Ability to review evidence such as system configurations, screenshots, logs, and diagrams for compliance validation.

Strong analytical, documentation, critical-thinking , and communication skills.

Ability to explain audit findings to technical and non-technical stakeholders.

Strong organizational skills with the ability to manage multiple concurrent priorities.

Growth mindset and commitment to developing expertise in ISO 27001, TISAX, and broader GRC disciplines.

Preferred Qualifications that Drive You Forward

ISO 27001 Lead Auditor or ISO 27001 Lead Implementer certification.

Certified Information Systems Auditor (CISA) certification.

Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM) certification.

Knowledge of TISAX and VDA ISA control domains, including information security,…