1

Isms Auditor Jobs (NOW HIRING)

NY ยท On-site

... ISMS) and SOC 2 Trust Services Criteria certification programs. * Serve as the primary point of contact for engaging with external and internal auditors, facilitating ISO 27001 certification and SOC ...

ISO27001 Compliance Analyst

Carlsbad, CA ยท On-site

$183K - $274K/yr

ISMS Lead Auditor or Lead Implementor certified or capable of acquiring certification upon hire * Ability to prepare disparate development teams for the rigors of IT framework controls * Deep ...

Quality Systems Analyst

San Jose, CA ยท On-site

$71K - $80K/yr

... System (ISMS), and other applicable management systems. The position works closely with cross ... Internal Auditor certification is preferred; Lead Auditor certification is an advantage.

Risk and Compliance Lead

Foster City, CA ยท On-site

$183K/yr

Manage relationships with external auditors and drive the annual audit calendar so certifications ... Own the core audit artifacts that back every certification including ISMS documentation, Statements ...

ISO27001 Compliance Analyst

Carlsbad, CA ยท On-site

$183K - $274K/yr

ISMS Lead Auditor or Lead Implementor certified or capable of acquiring certification upon hire * Ability to prepare disparate development teams for the rigors of IT framework controls * Deep ...

Risk and Compliance Lead

Foster City, CA ยท On-site

$210K - $270K/yr

Manage relationships with external auditors and drive the annual audit calendar so certifications ... Own the core audit artifacts that back every certification including ISMS documentation, Statements ...

Compliance Specialist

Elsmere, DE ยท Remote

$65 - $75/hr

Support ISO 27001 ISMS implementation and maintenance, including risk assessments, control reviews ... Proven experience coordinating with external auditors and managing audit evidence and remediation ...

... ISMS), and CMMI-DEV Level 3" : The Federal Financial Specialist will serve as a member of a large ... Big 4 experience with accounting or auditing on federal engagements * Proven ability to work ...

... System (ISMS), and CMMI-DEV Level 3" The Federal Audit Specialist will support the project ... Big 4 experience with accounting or auditing on federal engagements. * Proven ability to work ...

... auditors as required * Assist with developing and implementing application security and privacy policies, standards, and educational programs * Actively review and contribute to ISMS and PIMS ...

Lead Auditor Certifications in ISO 9001, ISO 27001/27002, ISO 13485, AS9100 or equivalent ... ISMS) aligned with ISO 27001 and ISO 27002 standards. * Demonstrated success establishing and ...

... System (ISMS), and CMMI-DEV Level 3" The Federal Financial Specialist serves as a member of a ... Auditing, Accounting and/or Financial Management Experience executing DoD operations and business ...

Showing results 41-60

Isms Auditor information

See salary details

$31.5K

$68.7K

$112K

How much do isms auditor jobs pay per year?

As of Sep 10, 2026, the average yearly pay for isms auditor in the United States is $68,732.00, according to ZipRecruiter salary data. Most workers in this role earn between $49,000.00 and $86,500.00 per year, depending on experience, location, and employer.

What are popular job titles related to Isms Auditor jobs?

For Isms Auditor jobs, the most frequently searched job titles are:

Infographic showing various Isms Auditor job openings in the United States as of August 2026, with employment types broken down into 86% Full Time, 10% Part Time, 1% Temporary, 2% Contract, and 1% Nights. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $68,732 per year, or $33 per hour.

Information Security Program Lead

Cranberry Township, PA โ€ข On-site

$125K - $152K/yr

Full-time

Re-posted yesterday


Job description

Overview
Are you someone who is passionate, motivated, and driven to make a difference? If so, MSA Safety is the perfect fit for your career.
At MSA, SAFETY is who we are AND it is what we do. We are a purpose-driven company committed to deploying innovation and technology to deliver on our Mission to help protect people and assets all around the world. We continue to be relentless in our pursuit of solving our customers greatest problems so they can go home safe each and every day.
Are you in? Read on for more details about this particular role.
Responsibilities
ISMS Ownership & ISO 27001
  • Own and maintain the Information Security Management System (ISMS), ensuring alignment with ISO 27001:2022 requirements and organizational objectives
  • Lead and coordinate internal and external ISO 27001:2022 audits, including audit planning, execution, and follow-up
  • Conduct gap analyses, risk assessments, and risk treatment planning in line with ISO 27001 Annex A controls
  • Develop, review, and maintain information security policies, standards, and procedures

Multi-Framework Compliance
  • Drive and coordinate compliance activities across SOC 2 Type II, including control documentation, evidence collection, and readiness reviews in preparation for external assessments
  • Support CMMC 2.0 Level 2 readiness and compliance, including control implementation guidance aligned with NIST SP 800-171 and coordination for third-party assessment organization (C3PAO) engagements
  • Maintain working knowledge of NIST SP 800-171 requirements and their relationship to CMMC, supporting Controlled Unclassified Information (CUI) scoping and handling requirements
  • Ensure compliance activities reflect applicable regional data protection obligations, including GDPR and other jurisdiction-specific requirements relevant to global operations
  • Maintain a cross-framework control mapping to identify overlaps, reduce duplication of effort, and ensure consistent control coverage across ISO 27001, SOC 2, CMMC, and NIST

Global Governance & Stakeholder Engagement
  • Serve as a key point of contact for external certification bodies, auditors, and regulatory inquiries
  • Report on the state of the ISMS, compliance posture, and key risk indicators to senior management across global business units
  • Contribute to security awareness programs and training initiatives, adapting content for regional and cultural relevance where needed
  • Collaborate with cross-functional and geographically distributed stakeholders to embed security and compliance requirements into business processes

Third-Party & Engineering Collaboration
  • Support and collaborate with the Third-Party Risk Management (TPRM) function, providing GRC expertise on vendor risk assessments and due diligence processes
  • Work closely with the software development function to integrate compliance requirements into the Secure Software Development Lifecycle (SSDLC)

Qualifications
Required Skills / Knowledge / Abilities
  • Deep understanding of ISO 27001:2022 and associated standards (e.g., ISO 27002), including practical ISMS management experience
  • Solid grasp of GRC methodologies, control frameworks, and structured risk assessment practices
  • Working knowledge of SOC 2 (Trust Services Criteria) and readiness or audit support experience
  • Working knowledge of CMMC 2.0 and/or NIST SP 800-171, including their application to CUI environments and U.S. federal compliance obligations
  • Familiarity with GDPR or equivalent data protection regulations as they apply to global enterprise operations
  • Experience with cross-framework control mapping across two or more of the above frameworks
  • Excellent written and verbal communication skills - ability to translate complex compliance topics for both technical and non-technical audiences across different cultural and organizational contexts
  • Proven ability to work independently and drive compliance initiatives with minimal supervision in a globally distributed team environment

Preferred Skills
  • Hands-on experience with SOC 2 Type II audit support and evidence collection
  • Direct involvement in CMMC readiness activities or C3PAO-facilitated assessments
  • Knowledge of cloud security controls, particularly in AWS and Office 365 environments
  • Familiarity with AI-enhanced GRC tooling and compliance automation approaches
  • Understanding of TPRM frameworks, vendor risk methodologies, and associated tooling
  • Familiarity with SSDLC principles and their integration with compliance requirements
  • Experience working across multiple time zones and jurisdictions in a multinational organization

Education & Experience
Required
  • Bachelor's degree in Computer Science, Information Security, or a relevant field
  • Demonstrated experience leading or supporting ISO 27001 certification or re-certification audits
  • Experience developing and implementing security policies and controls across multiple frameworks
  • Experience conducting structured risk assessments and managing risk treatment plans in complex, multi-jurisdictional environments

Preferred
  • ISO 27001 Lead Auditor or Lead Implementer certification (e.g., PECB, BSI, or equivalent)
  • Master's degree in Computer Science, Information Security, or a relevant field
  • Additional certifications such as CISM, CISA, CISSP, or ISO 27005 Risk Manager
  • Certifications or formal training in CMMC, NIST, or SOC 2 methodologies
  • Experience working in or supporting regulated industries subject to U.S. government compliance requirements

#LI-KH2
#LI-HYBRID