SR GRC Consultant II

• Fueled by our shared passion and expertise, CDW delivers innovative technology solutions for our customers. We're also committed to fostering an environment that embraces collaboration, celebrates integrity, inclusivity, and individuality, and paves the path for personal and professional growth. Experience a life in balance and join us on the journey forward.

We are seeking a proficient member for our Security Risk Management (SRM) team to spearhead the management of our ISO 27001 program while providing crucial support for customer and partner audits. This role entails close collaboration with various security, compliance, and engineering teams to enhance and optimize the program, ensuring its alignment with other audit and compliance initiatives, and broadening its scope. Additionally, you will actively contribute to other security risk management endeavors as required.

*What you will do: *

• Manage the ISO 27001 program, encompassing the maintenance of policies, procedures, controls, and evidence.

• Provide comprehensive support for customer and partner audits, including responding to requests, furnishing evidence, and facilitating interviews.

• Enhance and streamline the ISO 27001 program by identifying gaps, implementing best practices, and automating processes.

• Ensure alignment of the ISO 27001 program with other audit and compliance initiatives, such as SOC 2, PCI DSS, and SOX.

• Expand the scope of the ISO 27001 program by incorporating new services, locations, and functions.

• Offer support for various SRM activities, including risk assessments, awareness training, customer assurance, and other assigned duties.

• *What we expect of you: *

• Bachelor's degree in computer science, information security, or related field, or equivalent work experience.

• At least 7 years of experience in security risk management, audit, or compliance.

• Knowledge of ISO 27001, SOC 2, PCI DSS, SOX, GDPR, CMMC, and other security standards and frameworks.

• Experience in managing and supporting customer and partner audits.

• Strong communication, collaboration, and problem-solving skills.

• Ability to work independently and prioritize multiple tasks.

• Certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor are a plus.

About us
*We make technology work so people can do great things. *

CDW is a Fortune 500 technology solutions provider to business, government, education, and healthcare organizations across the globe. At CDW, we make it happen, together. Trust, connection and commitment are at the heart of how we work together to deliver for our customers. It's why we're coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we're headed. We're your long-term, full-stack, full-lifecycle technology partner. We have the experience, expertise, scale, relationships and deep industry knowledge to bring just about any vision to life. Together, we can deliver the full promise of what technology can do. Together, we Make Amazing Happen.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.