Information Security Compliance Lead

About Dragonfli Group Dragonfli Group is an elite cybersecurity and IT advisory firm specializing in security operations, architecture, governance, and technology implementation for enterprise and regulated industry clients. We are a certified small business with deep experience across federal, financial services, utilities, and professional services sectors. Overview Location: Washington, DC or Boston, MA or Dayton, OH preferred. Dragonfli Group is seeking an Information Security Compliance Lead for a high‑stakes, client‑facing engagement. This is a pure‑play GRC role supporting an active information security program within a premier client environment. The successful candidate will act as a primary lead for the GRC function, requiring deep compliance execution experience, exceptional professional presence, and the ability to operate with total autonomy from day one. The right candidate will be able to manage audit cycles and platform implementations immediately. Responsibilities Independently complete complex client security questionnaires and audit responses using established firm precedent and maintain organized submission records. Lead compliance monitoring and enforcement against ISO 27001 and ISO 42001 (AI Management System). Directly manage the 30‑day implementation and optimization of the Vanta trust center platform. Conduct and document risk assessments, policy reviews, and audit evidence gathering for an upcoming audit window. Develop and maintain cybersecurity policies and procedures aligned to regulatory requirements and AI/ML‑enabled monitoring. Deliver and track compliance training and awareness initiatives; report outcomes to leadership. Interface directly with client legal, compliance, and IT stakeholders as a polished representative of the firm. #J-18808-Ljbffr Dragonfli Group