Description

 Who We Are

Our purpose at CloudHQ is to provide flexible, efficient, and resilient data center solutions to businesses of all sizes. Our growing organization was founded by the pioneer of data center REITs. CloudHQ has state-of-the-art data center sites located in two Northern Virginia locations, as well as London, Frankfurt, Paris, Milan, and Sao Paulo, and we anticipate exponential growth over the next several years both in the US and abroad.

What The Role Entails 

CloudHQ is seeking an experienced Director of Audit & Compliance to develop and implement a comprehensive security compliance program for our global portfolio of data centers. Lead the security assessments, attestations, and resolution necessary to maintain compliance with ISO 27001:2022, PIC DSS, SOC 1 Type 2, SOC2 Type2 and NIST 800-53. 

What You Get to Do

· Implement an audit and compliance program that meets the needs of business units and clients

· Maintain strong working relationships necessary to influence stakeholders internally and externally to maintain compliance

· Be the single point of contact with auditors, regulators, and clients in compliance-related activities. Oversee all audits using internal and external resources

· Be the Subject Matter Expert for compliance standards, frameworks, and regulations worldwide

· Create policies and procedures that meet the requirements of the relevant certifications and regulations. Own and maintain the ISMS as necessary

· Research, select and implement new Information Security technologies

· Apply working knowledge of information security, privacy regulations and business need to drive alignment with controls. Balance risk vs reward when making decisions

· Perform internal gap assessments, identify resolutions, and work with stakeholders to remediate the findings

· Report metrics to the various stakeholders as needed, including the ISO Steering Committee

Requirements

 What You Bring to The Role 

• Minimum of 7 years of experience in leading an audit and compliance program
• Experience and a thorough understanding of the requirements and structure of ISO 27001:2022, PIC DSS, SOC 1 Type 2, SOC2 Type2 and NIST 800-53

 Our Ideal Candidate Will Also Possess

• Certified Information Systems Security Professional (CISSP), ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, Certified Information Systems Auditor, or equivalent certifications
• Bachelor’s degree in Information Systems Management, Computer Science, Cybersecurity, or other related fields
• Experience building certification roadmaps based on customer requirements, compliance documentation, and ensuring that committed assessments are delivered on schedule
  Global experience strongly preferred
• ISO 14001 and ISO 50001 experience preferred

What We Offer

CloudHQ’s people and culture are the most enriching aspects that make us a great place to work. We are strengthened by industry experts who bring extensive knowledge, skill, and experience; leaders who bring vision, innovation and commitment to our people; and an expanding team of individuals who believe in that vision, and bring their best to support their customers and team.

Our employees enjoy competitive compensation and rewarding incentives, comprehensive benefits (medical, dental, vision, life insurance, disability), 401(k) with match, 12 paid holidays, generous PTO, development opportunities, and the ability to closely impact and contribute to the growth of an exceptional organization.

 Equal Employment Opportunity

CloudHQ is an equal employee opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected veteran status, or other legally protected status.