IT Internal Compliance Specialist

Lubrizol Corporation•Deer Park, TX

12d•Hybrid

About The Position

As an IT Internal Compliance Specialist (ISO 27001 + TISAX), you'll be at the forefront of our innovation, driving information security compliance, governance, risk management, and audit readiness initiatives that strengthen our global security posture. You'll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing, and enhance modern life.

Requirements

Bachelor’s degree in Information Security, Information Technology, Computer Science, Accounting, or a related field.
2+ years of experience in IT security auditing, compliance, information security, or governance, risk, and compliance (GRC) roles.
Understanding of ISO 27001/27002, Annex A controls, risk management requirements, or audit methodologies.
Familiarity with information security domains including access control, network security, vulnerability management, encryption, logging, and secure configurations.
Knowledge of frameworks such as the NIST Cybersecurity Framework (NIST CSF), CIS Controls, Information Technology General Controls (ITGCs), or ISO 31000 concepts.
Ability to review evidence such as system configurations, screenshots, logs, and diagrams for compliance validation.
Strong analytical, documentation, critical-thinking, and communication skills.
Ability to explain audit findings to technical and non-technical stakeholders.
Strong organizational skills with the ability to manage multiple concurrent priorities.
Growth mindset and commitment to developing expertise in ISO 27001, TISAX, and broader GRC disciplines.

Nice To Haves

ISO 27001 Lead Auditor or ISO 27001 Lead Implementer certification.
Certified Information Systems Auditor (CISA) certification.
Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM) certification.
Knowledge of TISAX and VDA ISA control domains, including information security, prototype protection, and data protection.
Experience supporting security compliance, audit readiness, and remediation programs in global environments.

Responsibilities

Lead and execute internal compliance reviews aligned with ISO 27001, TISAX, VDA ISA control domains, and internal security requirements.
Evaluate the design and operating effectiveness of technical, administrative, and physical information security controls.
Prepare compliance scopes, testing plans, sampling guidance, evidence requests, and audit documentation.
Document findings, risks, and recommended corrective actions in a clear and structured format.
Partner with control owners to track remediation efforts, validate corrective actions, and sustain compliance.
Support Information Security Management System (ISMS) maintenance and audit readiness activities.
Coordinate evidence collection and stakeholder engagement for external audits and assessments.
Participate in IT risk management activities and help identify, assess, and document security risks.
Support third-party risk reviews, policy compliance assessments, and governance reporting activities.
Contribute to continuous improvement initiatives, security metrics, compliance dashboards, and audit automation efforts.