Join 1Kosmos as an IT & Information Security Compliance Manager (Automation & Certifications). This hands-on, operational leadership role is responsible for owning and strengthening the company’s security and compliance posture across SOC 2, ISO 27001/27002, FedRAMP High, and NIST 800-53/171 frameworks. You will lead automated compliance monitoring and evidence collection using Drata, Vanta, Tugboat Logic, or equivalent platforms, integrating these with internal systems (ticketing, HRIS, cloud providers, etc.). You will prepare for and manage SOC 2 Type I/II, ISO audits, and FedRAMP readiness assessments, performing gap analyses, remediation, and control testing. You will partner with IT Operations and Engineering to embed security controls in infrastructure, cloud, network, and identity systems; maintain security policies, SSPs, POA&Ms, and other audit documentation. You will oversee incident response, change management, and vendor risk programs to ensure consistent compliance coverage, manage relationships with external auditors and assessors, and define metrics for audit readiness, risk posture, and automation efficiency. Stay current with evolving frameworks and technologies to improve assurance automation, and champion security awareness and ongoing improvement across the organization.

Join 1Kosmos as an IT & Information Security Compliance Manager (Automation & Certifications). This hands-on, operational leadership role is responsible for owning and strengthening the company’s security and compliance posture across SOC 2, ISO 27001/27002, FedRAMP High, and NIST 800-53/171 frameworks. You will lead automated compliance monitoring and evidence collection using Drata, Vanta, Tugboat Logic, or equivalent platforms, integrating these with internal systems (ticketing, HRIS, cloud providers, etc.). You will prepare for and manage SOC 2 Type I/II, ISO audits, and FedRAMP readiness assessments, performing gap analyses, remediation, and control testing. You will partner with IT Operations and Engineering to embed security controls in infrastructure, cloud, network, and identity systems; maintain security policies, SSPs, POA&Ms, and other audit documentation. You will oversee incident response, change management, and vendor risk programs to ensure consistent compliance coverage, manage relationships with external auditors and assessors, and define metrics for audit readiness, risk posture, and automation efficiency. Stay current with evolving frameworks and technologies to improve assurance automation, and champion security awareness and ongoing improvement across the organization.