Senior Information Security Officer

The Role

We are seeking a Senior Information Security Officer to be a key pillar of our Global GRC function. This is not just a support role; you will be the lead architect for Information Security and Compliance by Design across our most critical global projects. You will provide expert oversight for our Internal Control System (ICS) and drive the execution of Statutory and Group audits (SOX). This role is designed for a high-performing, self-motivated professional who thrives in a virtual environment and can independently navigate complex global stakeholders.

Key Responsibilities

• Global Project Leadership: Lead and manage critical global compliance projects, ensuring security requirements are integrated into the project lifecycle from inception to deployment.
• Compliance by Design: Act as a senior advisor to product and engineering teams to implement "Compliance by Design" principles, ensuring new systems and software are natively compliant with SOX, ISO 27001, SOC1/2 and NIST frameworks.
• Internal Control System (ICS): Autonomously design, implement, and monitor a robust ICS framework. You will be responsible for the health and effectiveness of controls across the US and Global hubs.
• SOX & Statutory Audits: Lead the testing, validation, and documentation of IT General Controls (ITGCs). Serve as the primary point of contact for external and internal auditors, managing the end-to-end audit lifecycle.
• Risk Governance: Independently conduct deep-dive risk assessments for high-priority global initiatives, identifying vulnerabilities and negotiating remediation strategies with senior leadership.

Candidate Profile: Self-Management & Strategic Drive

As a virtual-first leader, you must demonstrate:

• Independence & Ownership: A proven ability to work without day-to-day supervision, taking full accountability for regional and global compliance outcomes.
• Self-Motivation: A "self-starter" mentality capable of driving complex projects to completion within Solera’s high-pace "365-day" cycle.
• Strategic Influence: The ability to negotiate security and compliance requirements with global stakeholders, including Legal, Finance, and C-Suite leadership.
• Exceptional Communication: Mastery of English (written/verbal) to lead global meetings and produce executive-level audit reports.

Requirements

• Experience: 8+ years in Information Security/GRC, with a heavy focus on IT Audit and SOX compliance in a global, multi-national environment.
• Technical Mastery: In-depth knowledge of ITGCs, SOC1/2, ISO 27001, and the ability to apply these to "Secure SDLC" and "Compliance by Design" workflows.
• Education: Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related field.
• Certifications:CISA (Certified Information Systems Auditor) is highly preferred. CISSP, CISM, or CRISC are significant advantages.
• Virtual Fluency: Success in a 100% remote role, with the discipline to manage early/late sessions to bridge the EMEA/US timezone gap.
  - Language: Professional fluency in English (written and verbal) is mandatory for supporting US and EMEA stakeholders.

Originally posted on Himalayas