Compliance and Security Lead

This role leads the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs, including maintaining program scope, tracking compliance obligations, and ensuring audit readiness. The position involves leading the internal audit program, pursuing CMMC certification, and managing the enterprise risk management program. The role also oversees vendor security reviews, serves as the Data Protection Officer, and optimizes compliance tooling to support federal and defense opportunities.