If you searched Superstar Sourcing for Principal Security Compliance Professional (with 3 additional requirements) on December 21, 2025 you'd find 466 great candidates

B**** S****

CEO - ACG Cybersecurity

This profile is an excellent match, explicitly listing ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, Risk Manager, CISO experience, and over 10 years experience. CEO, ACG Cybersecurity (Consulting) → CISO; 25+ years experience, explicitly matches 4 key criteria plus high seniority. Excellent.

Y**** J****

Managing Partner at Passpoint Security

This candidate explicitly states ISO27k Lead Implementer, extensive GRC, risk assessment experience, and 25+ years, aligning perfectly with the Principal role expectation, despite the current 'Partner' title. PwC → Delta Tech, 25+ years, ISO27k Lead Implementer. Excellent.

D**** B****

Governance, Risk, & Compliance

This candidate possesses all required skills, including demonstrated ISO Lead Auditor experience (listed in certifications), extensive GRC background, and explicitly held a Principal Consultant role, making this a near-perfect match despite current title being President/VP. Halock Security Labs → Experis → Protiviti → JPMorgan Chase & Co., 34 years experience. Excellent.

J** P***

Cybersecurity Compliance Leader & Deputy CISO @ Choreograph | CISSP, CRISC, CISA, CGEIT, CBCP, PMP, HITRUST, ISO27001

This candidate is a direct match, holding the ISO 27001 certification, explicitly conducting internal audits, performing risk assessments, managing compliance programs globally, and acting as Deputy CISO/Director, which supports a Principal level expectation. Compliance Manager → Deputy CISO, CISSP/CRISC/ISO27001 certified. Excellent.

R**** U****

Cybersecurity Engineer

This candidate looks like an excellent fit, explicitly mentioning leading ISO 27001 audits, significant strategy/architecture experience (implying enterprise solutions), 32 years of experience, C-Level/strategic perspective aligning with Principal level, and GRC work covering risk and compliance. IT Audit/GRC → vCISO/Consultant, led ISO 27001 certification. Excellent.

T*** A****

Cybersecurity & Compliance Leader | Driving Risk Management, GRC, & Secure Digital Transformation

This candidate is a near-perfect fit, explicitly detailing leadership in enterprise-wide compliance programs, ISO 27001 journey guidance, and deep risk management experience, consistent with Principal level expertise. Cybersecurity & GRC Executive → Big 4 advisory → 20 years experience. Excellent.

Y**** B****

Governance Risk & Compliance Leader

Excellent fit for the compliance, risk, and governance elements, explicitly mentioning ISO 27001 experience and a Head level role overseeing enterprise GRC programs. IBM → Equifax, significant GRC and risk leadership roles. Excellent.

D**** G***

Cybersecurity and Compliance Professional | PCI DSS Expert

Excellent alignment with deep ISO 27001 Lead Auditor qualification, extensive risk assessment experience using ISO 27005, compliance focus, and 20+ years of relevant experience, though the highest role mentioned here is Senior/Manager. CompliancePoint Manager → current Senior role. Excellent.

S**** D****

Director-Information Security Compliance & Oversight at Broadridge Financial Solutions

This Director has strong explicit experience covering ISO 27001 audits, risk assessments, and deep security compliance leadership within financial services, aligning well with the seniority requirement. Director at Broadridge → 20 years experience including GRC and ISO 27001 execution. Excellent.

G**** S****

Cybersecurity Leader | Advisor | Mentor | Investor

Excellent match with advertised ISO certifications and strong GRC leadership across several organizations, though current title is 'Specialist' not 'Principal'. Cybersecurity Leader → Director Risk/Compliance roles, 17+ years experience, explicitly lists ISO 27001. Excellent.

J**** L****

GRC Automation Leader | Driving Scalable Compliance for Enterprises

This individual is a strong fit, possessing the required experience, leadership in GRC, and explicitly holds the ISO 27001 Lead Auditor certification while working on enterprise compliance frameworks. Current role as GRC Automation Leader → Senior Compliance Manager, focusing on ISO 27001, SOC 2, and risk guidance. Excellent.

G**** C****

GRC Director | Governance, Risk & Compliance Leader NIST/PCI-DSS Expert | Assisting companies in compliance needs to achieve business goals and stay protected from financial or reputational loss.

Excellent alignment on experience (15+ years), compliance, risk assessment (including quantitative), and explicit ISO 27001 knowledge, fitting the Principal level expectation through extensive GRC leadership experience. 15+ years leading GRC solutions across diverse regulated industries, explicitly listing ISO 27001. Excellent.

D**** C***

Principal Consultant at Trustwave

This Principal Consultant explicitly mentions strong knowledge of ISO 27001, conducts risk assessments, and works in governance/risk/compliance, making this a very strong match, though Enterprise Solutions isn't highlighted. Trustwave Principal Consultant → SMART → Trustwave, 29+ years total. Excellent.

R**** H***

Senior GRC, Info/Cyber Security, IT Audit, BCDR Professional

Excellent match on nearly all technical skills including ISO 27001 specialization (though not Lead Auditor verified here) and strong risk/GRC background across many years, fitting the seniority. Senior GRC/Security Pro, 24 years experience, listing ISO 27001 skills. Excellent.

S**** B****

CISA, HCISPP, CCSFP, ISO 27001 Lead Auditor

This candidate explicitly holds the ISO 27001 Lead Auditor certification and extensive GRC/IT Security leadership experience managing audit programs and frameworks, fulfilling almost all technical requirements; only the 'Principal level' title/role is missing, but the scope implies it. Ex-various roles covering HIPAA, ISO, SOC, etc., 18 years experience. Excellent.

P**** D****

Head of Compliance

Excellent match highlighting ISO 27001 management and Head of Compliance role, meeting tenure, though level is Head, not strictly Principal/Director equivalent. A2Q2 → Uber → Scale AI. Excellent.

J**** S****

Cyber Security Consultant

Strong experience in security and compliance across many frameworks, indicating capability for a Principal role, though the 'Lead Auditor' cert isn't explicitly stated. Seasoned technologist → security/risk leader → consulting, 23 yrs exp. Strong.

M**** B****

Cybersecurity Strategy, Risk, and Compliance Leader

Excellent fit for compliance and ISO 27001, and mentions 'enterprise wide security solution', although operates at Manager level now. Leader → Cyber Strategy/Risk/Compliance, 18+ years experience, ISO 27001 certified auditor, experience with enterprise security solutions. Strong.

R**** H****

Security at dbt Labs

This individual has extensive compliance and risk background with relevant certifications. Held Manager and Director roles, suggesting high capability, though Principal level isn't explicitly stated. Security Compliance → Risk Assessment Services → Informational Security Compliance Analyst/Manager at Equifax/dbt Labs → Director. 15+ years total. Excellent.

S*** S****

Cybersecurity Executive

Excellent match on compliance, risk management, and handling ISO 27001 experience, though the level is Head/VP recently, showing Principal capability. Citi → Epsilon → Publicis Groupe, 23+ years experience. Strong.

B** F****

Director, Information Security Service Delivery at EY

This Director role covers GRC, security programs, and advises leadership on risks/policies aligned with ISO 27002, showing strong senior compliance domain strength, but missing the ISO 27001 Lead Auditor title specifically. EY Director leading global security programs, 31 years experience. Strong.

J**** C***

Cybersecurity, Governance, Risk and Compliance.

Excellent technical match on compliance, risk assessment, and explicit ISO 27001 implementation experience, but holds Specialist level rather than Principal. 18+ years experience, CCSP/CISSP/CISA, implemented COBIT/ISO 27001 frameworks. Strong.

A**** E****

Excellent fit for level and experience, with strong background in leading enterprise GRC platforms and security departments, though missing the specific ISO 27001 Lead Auditor cert. 30 years including CISO roles, led enterprise security/GRC implementation at Vanguard. Strong.

B** H****

CPA/CITP, CISA, CRISC, CDPSE, CISM CyberSecurity and IT Audit Speaker, vCISO, US Marine, ISACA-RTC Board Member

This candidate explicitly lists CISA and holds several other relevant risk/audit certifications, has Principal experience, and extensive audit/risk history exceeding 10 years. US Marine → McGladrey → Bernard Robinson & Co (Principal) → Arch US, 22 years total. Strong.

V**** R****

Senior Information Security Auditor at CenturyLink

This person has significant security and compliance experience across many frameworks, hitting most requirements. Ex-KPMG → CenturyLink, 23 years total. Strong.

D**** C***

Sr. Director, Cybersecurity GRC

This professional has extensive experience in risk, audit, and compliance, fitting the senior nature of the role. Sr. Director, Cybersecurity GRC → Sr. Director, Enterprise Risk → Principal, IT Security Risk & Compliance → Lead IT Auditor; 19 years experience, strong GRC skills, mentions ISO 27000. Strong.

D**** I****

Senior Manager at Varmis Information Security Solutions Company.

This candidate has extensive experience leading security, risk, and audit projects, covering several key compliance areas.

M*** H***

Lead Vertical Business Risk and Controls Advisor at USAA

Current role is Principal/Lead Advisor focusing on risk and controls, fulfilling the Principal expectation and heavily weighted in risk assessment for enterprise cyber/IT/vendor security. Lacks explicit ISO 27001 Lead Auditor certification confirmation. Strong.

D**** M****

Senior Manager - Cyber Security Office - Governance, Risk & Compliance at Stanley Black & Decker, Inc.

This professional has significant GRC leadership experience covering compliance, risk, and utilizing multiple frameworks including ISO. Ex-PwC → Deloitte → Stanley Black & Decker, Senior Manager level. Strong.

C**** S****

This candidate has extensive senior leadership experience advising executives on security and risk management. VP level suggests Principal fit, with broad focus on security standards, but specific ISO 27001 Lead Auditor cert is unconfirmed. VP, Audit and Security Services → VP, InfoSec, Enterprise Risk at Lowe's (enterprise NAC implem) → VP, InfoSec at L Brands. Excellent.