InfoSec Compliance Operations Specialist

About the role

We are looking for a detail‑oriented InfoSec Compliance Operations Specialist to support the implementation and day‑to‑day operation of our Information Security governance, compliance and certification activities. The role is hands‑on and execution‑focused, working closely with internal and external stakeholders.

Key responsibilities

• Maintain compliance documentation, control matrices, risk registers, evidence repositories and corrective‑action trackers.
• Collect, review and organise evidence for ISO/IEC 27001, PCI DSS, internal audits, external assessments and certifications.
• Support the preparation, version control and periodic update of security policies, standards, procedures and guidelines.
• Track compliance gaps, audit findings, remediation actions and ensure deadlines are met.
• Assist with internal and external audits, readiness assessments and certification activities.
• Prepare compliance reports, audit updates, policy summaries and management‑review materials.
• Maintain the Information Security risk register, control inventory and Statement of Applicability.
• Respond to customer security questionnaires and coordinate with IT, Legal, Procurement, Compliance and business teams.

Required profile

• Relevant education or professional experience in information security, cybersecurity, compliance, risk management or audit.
• Strong understanding of security governance, risk, internal controls and standards such as ISO/IEC 27001 or PCI DSS.
• Experience preparing, reviewing or maintaining policies, procedures and compliance records.
• Excellent documentation, business‑writing and stakeholder‑coordination skills.
• Ability to manage multiple deadlines, follow established procedures and handle confidential information.

Required skills

• ISO/IEC 27001
• PCI DSS