Job Title: IT Internal Compliance Specialist
Location: Wickliffe, OH or Deer Park, TX
Job Type:Full-time, Hybrid: Collaborate in-office 4 days each week, with 1 flexible day from home
How You'll Make an Impact As an
IT Internal Compliance Specialist (ISO 27001 + TISAX), you'll be at the forefront of our innovation, driving information security compliance, governance, risk management, and audit readiness initiatives that strengthen our global security posture. You'll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing, and enhance modern life. In this role, you will:
- Lead and execute internal compliance reviews aligned with ISO 27001, TISAX, VDA ISA control domains, and internal security requirements.
- Evaluate the design and operating effectiveness of technical, administrative, and physical information security controls.
- Prepare compliance scopes, testing plans, sampling guidance, evidence requests, and audit documentation.
- Document findings, risks, and recommended corrective actions in a clear and structured format.
- Partner with control owners to track remediation efforts, validate corrective actions, and sustain compliance.
- Support Information Security Management System (ISMS) maintenance and audit readiness activities.
- Coordinate evidence collection and stakeholder engagement for external audits and assessments.
- Participate in IT risk management activities and help identify, assess, and document security risks.
- Support third-party risk reviews, policy compliance assessments, and governance reporting activities.
- Contribute to continuous improvement initiatives, security metrics, compliance dashboards, and audit automation efforts.
Required Qualifications that Enable Your Success - Bachelor's degree in Information Security, Information Technology, Computer Science, Accounting, or a related field.
- 2+ years of experience in IT security auditing, compliance, information security, or governance, risk, and compliance (GRC) roles.
- Understanding of ISO 27001/27002, Annex A controls, risk management requirements, or audit methodologies.
- Familiarity with information security domains including access control, network security, vulnerability management, encryption, logging, and secure configurations.
- Knowledge of frameworks such as the NIST Cybersecurity Framework (NIST CSF), CIS Controls, Information Technology General Controls (ITGCs), or ISO 31000 concepts.
- Ability to review evidence such as system configurations, screenshots, logs, and diagrams for compliance validation.
- Strong analytical, documentation, critical-thinking, and communication skills.
- Ability to explain audit findings to technical and non-technical stakeholders.
- Strong organizational skills with the ability to manage multiple concurrent priorities.
- Growth mindset and commitment to developing expertise in ISO 27001, TISAX, and broader GRC disciplines.
Preferred Qualifications that Drive You Forward - ISO 27001 Lead Auditor or ISO 27001 Lead Implementer certification.
- Certified Information Systems Auditor (CISA) certification.
- Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM) certification.
- Knowledge of TISAX and VDA ISA control domains, including information security, prototype protection, and data protection.
- Experience supporting security compliance, audit readiness, and remediation programs in global environments.
Your Work Environment At Lubrizol, we're committed to providing a safe, inclusive, and empowering environment where you can do your best work-whether in a lab, on the production floor, or in a hybrid office setting. Depending on your role, your work environment may include:
- Standing, walking, or operating equipment for extended periods
- Working in a lab or manufacturing setting with appropriate PPE provided
- Use of computers and digital tools in an office or hybrid environment
- Occasional lifting or movement of materials
- Adherence to rigorous safety protocols and ergonomic standards
We continuously invest in our facilities and technologies to ensure they support your well-being, productivity, and growth. If you require reasonable accommodation, we are committed to working with you to ensure an inclusive and accessible experience.
Benefits that Empower You - Competitive salary with performance-based bonus plans
- 401(k) match + Age-Weighted Defined Contribution
- Comprehensive medical, dental & vision coverage
- Health Savings Account (HSA)
- Paid holidays, vacation, and parental leave
- Flexible work environment
- Learning and development opportunities
- Career and professional growth
- Inclusive culture and vibrant community engagement
Learn more at https://benefits.lubrizol.com/!
#LI-MS1 #LI-Hybrid
