Information Security & Compliance Manager

Who We Are

Our purpose at CloudHQ is to provide flexible, efficient, and resilient data center solutions to businesses of all sizes. Our growing organization was founded by the pioneer of data center REITs. CloudHQ has state-of-the-art data center sites located on two Northern Virginia campuses, as well as London, Frankfurt, Paris, Milan, and São Paulo, and we anticipate exponential growth over the next several years both in the US and abroad. Our company’s reach is expanded through our affiliate companies – Cloud Capital, Dalian Development, and WindHQ.

What The Role Entails

The Information Security & Compliance Manager is responsible for managing CloudHQ’s day-to-day Governance, Risk, and Compliance (GRC), information security, audit, and compliance activities.

Reporting to the Director of Audit & Compliance, this role provides leadership and oversight to the Information Security & Compliance team, manages compliance activities across the organization, leads audits and assessments, oversees risks and controls, and drives remediation and continual improvement.

The position supports CloudHQ’s compliance with ISO 27001:2022, SOC 1, SOC 2, ISO 14001, ISO 50001, and other applicable frameworks, regulatory requirements, and organizational standards.

What You Will Get To Do

• Manage the day-to-day execution and continual improvement of CloudHQ’s GRC, audit, information security compliance, and related programs
• Provide direct management, guidance, coaching, and professional development to Information Security & Compliance Analysts
• Assign and prioritize team activities, manage workload and deadlines, and review deliverables for quality, consistency, completeness, and audit readiness
• Serve as the primary escalation point for the analyst team on complex GRC, audit, risk, control, and compliance matters
• Manage and support CloudHQ’s Information Security Management System (ISMS) and compliance with ISO 27001:2022, SOC 1, SOC 2, and other applicable security and compliance frameworks
• Support the management and continual improvement of ISO 14001 and ISO 50001 programs, as applicable
• Lead and coordinate internal and external audits, certifications, attestations, and assessments, including planning, evidence collection, stakeholder coordination, audit responses, findings, and remediation
• Manage risk assessments, control assessments, internal audits, gap assessments, and compliance reviews
• Work directly with business and technical process owners to evaluate controls, identify gaps and risks, and establish practical remediation plans
• Manage audit findings, non-conformities, risks, corrective actions, and remediation activities through closure, escalating significant or overdue matters as appropriate
• Oversee the administration, governance, and effective use of GRC platforms, including risk registers, control libraries, assessments, audit evidence, findings, remediation workflows, dashboards, and compliance reporting
• Establish consistent and repeatable GRC processes, methodologies, workflows, documentation, and reporting across the organization
• Lead the development, review, implementation, and maintenance of policies, standards, procedures, controls, and related compliance documentation
• Coordinate documentation and evidence required to support certifications, attestations, customer requirements, internal and external audits, and regulatory obligations
• Provide GRC, audit, risk, control, and compliance guidance to business and technical teams
• Monitor changes to applicable standards, regulatory requirements, contractual obligations, and industry practices and coordinate necessary updates to compliance activities
• Prepare and present compliance, risk, audit, findings, and remediation status to management and the ISO Steering Committee.
• Support security and compliance awareness and training initiatives
• Identify opportunities for automation, standardization, and process improvements that increase the efficiency, consistency, and effectiveness of GRC activities
• Escalate significant compliance gaps, risks, control deficiencies, and unresolved remediation activities to the Director of Audit & Compliance