IT Internal Compliance Specialist

Lubrizol•Deer Park, OH

10d•Hybrid

About The Position

Shape the Future with Us. At Lubrizol, we’re bringing to life the chemistry behind clean water, efficient transportation, reliable infrastructure, critical medicines, and the products people rely on every day through science, sustainability, and a culture of inclusion. As part of our global team, you’ll be empowered to make a real impact - on your career, your community, and the world around you. In this role, you will: Lead and execute internal compliance reviews aligned with ISO 27001, TISAX, VDA ISA control domains, and internal security requirements. Evaluate the design and operating effectiveness of technical, administrative, and physical information security controls. Prepare compliance scopes, testing plans, sampling guidance, evidence requests, and audit documentation. Document findings, risks, and recommended corrective actions in a clear and structured format. Partner with control owners to track remediation efforts, validate corrective actions, and sustain compliance. Support Information Security Management System (ISMS) maintenance and audit readiness activities. Coordinate evidence collection and stakeholder engagement for external audits and assessments. Participate in IT risk management activities and help identify, assess, and document security risks. Support third-party risk reviews, policy compliance assessments, and governance reporting activities. Contribute to continuous improvement initiatives, security metrics, compliance dashboards, and audit automation efforts.

Requirements

Bachelor’s degree in Information Security, Information Technology, Computer Science, Accounting, or a related field.
2+ years of experience in IT security auditing, compliance, information security, or governance, risk, and compliance (GRC) roles.
Understanding of ISO 27001/27002, Annex A controls, risk management requirements, or audit methodologies.
Familiarity with information security domains including access control, network security, vulnerability management, encryption, logging, and secure configurations.
Knowledge of frameworks such as the NIST Cybersecurity Framework (NIST CSF), CIS Controls, Information Technology General Controls (ITGCs), or ISO 31000 concepts.
Ability to review evidence such as system configurations, screenshots, logs, and diagrams for compliance validation.
Strong analytical, documentation, critical-thinking, and communication skills.
Ability to explain audit findings to technical and non-technical stakeholders.
Strong organizational skills with the ability to manage multiple concurrent priorities.
Growth mindset and commitment to developing expertise in ISO 27001, TISAX, and broader GRC disciplines.

Nice To Haves

ISO 27001 Lead Auditor or ISO 27001 Lead Implementer certification.
Certified Information Systems Auditor (CISA) certification.
Certified in Risk and Information Systems Control (CRISC) or Certified Information Security Manager (CISM) certification.
Knowledge of TISAX and VDA ISA control domains, including information security, prototype protection, and data protection.
Experience supporting security compliance, audit readiness, and remediation programs in global environments.

Responsibilities

Lead and execute internal compliance reviews aligned with ISO 27001, TISAX, VDA ISA control domains, and internal security requirements.
Evaluate the design and operating effectiveness of technical, administrative, and physical information security controls.
Prepare compliance scopes, testing plans, sampling guidance, evidence requests, and audit documentation.
Document findings, risks, and recommended corrective actions in a clear and structured format.
Partner with control owners to track remediation efforts, validate corrective actions, and sustain compliance.
Support Information Security Management System (ISMS) maintenance and audit readiness activities.
Coordinate evidence collection and stakeholder engagement for external audits and assessments.
Participate in IT risk management activities and help identify, assess, and document security risks.
Support third-party risk reviews, policy compliance assessments, and governance reporting activities.
Contribute to continuous improvement initiatives, security metrics, compliance dashboards, and audit automation efforts.