What are the responsibilities and job description for the Compliance Specialist position at Calance?
The Cybersecurity Compliance Engineer is responsible for ensuring that the organization adheres to cybersecurity regulations, standards, and internal policies. This role involves developing, implementing, maintaining, and monitoring effective security controls through compliance programs that protect the company's information assets and ensure compliance with applicable laws and regulations. Frameworks aligned include NIST 800-171, ISO27001, CMMC, UK Cyber Essentials, and IEC-62443 standards to mitigate risks and support operational excellence. The candidate will be able to lead business units to resolution of gaps or compliance deficiencies.
Position: Cybersecurity Compliance Engineer- Hybrid
Duration: 6 months contract to hire
Location: Houston, TX Hybrid Engineer
Job Summary:
- The Cybersecurity Compliance Engineer is responsible for ensuring that the organization's information systems and technologies comply with regulatory and industry standards, such as PCI, ISO 27001, and SOC2. This role involves designing, implementing, and maintaining effective security controls to protect the company's information assets and ensure compliance with applicable laws and regulations.
Key Responsibilities:
- Develop and manage comprehensive cybersecurity compliance programs in accordance with ISO27001, NIST 800-171, CMMC, and IEC-62443 standards.
- Conduct risk assessments to identify vulnerabilities in the company's information systems and technologies.
- Monitor changes in cybersecurity Policies and communicate updates to relevant stakeholders.
- Prepare and maintain detailed documentation including policies and diagrams for internal and external audits.
- Collaborate with various teams to implement security controls that align with business requirements and support the company's Cybersecurity goals.
- Conduct internal and Business unit audits to ensure compliance with applicable laws and regulations and make recommendations for improvements.
- Engage with external entities such as customers and vendors to understand their security requirements and ensure corporate compliance.
- Stay current with emerging security threats and industry best practices and recommend new security controls and technologies to improve the company's security posture.
Qualifications:
- Required: Strong understanding of ISO27001, NIST 800, NIST CSF, CMMC, and IEC-62443 standards.
- Required: Proven experience in cybersecurity compliance, risk management, or IT audit.
- Required: Experience developing and implementing security policies, procedures, and standards.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Required: Excellent communication, analytical, and problem-solving skills.
- Ability to work collaboratively with cross-functional teams.
- 5 years of experience in information security, cybersecurity, privacy, risk management, or compliance fields.
- Advanced knowledge of at least one operating system (e.g., Linux, Windows).
- Experience with Azure Cloud resources (e.g., AAG, APIM, InTune, Defender)
- Strong analytical and problem-solving skills.
- Excellent written and verbal communication skills.
- Certifications such as CISSP, CISM, or equivalent are a plus.
Shashi Parashar
Talent Acquisition Manager
Office: 1-949-681-9546 - Mobile: 949-681-9546
sparashar@calance.com
Calance Jobs: www.calancejobs.com
Corporate: www.calanceus.com
