Quality & Information Security Management Representative (QISMR)

Job Description: Quality & Information Security Management Representative (QISMR)

Role Overview
The Quality & Information Security Audit Management Representative is responsible for ensuring that both product/service quality standards and information security controls are maintained, audited, and continuously improved. This role bridges quality assurance and information security auditing, supporting compliance with ISO, SOC 2 Type 2, HIPPA, PCI DSS 4.0, and other relevant standards.

Key Responsibilities

Quality Assurance Duties

• Understand defined quality standards as documented in the Quality Manual.
• Ensure Project Teams have the required documentation to validate technical stories, test plans, test results and sign off by the client.
• Ensure the test results align with thresholds designated in the client contract.
• Document mitigation plans for any defects, non-conformities, or process gaps identified by internal or external auditors; tracking findings and resolution for teams involved
• Track corrective and preventive actions to address issues; ensure the Business Excellence team accepts remediation and supporting evidence
• Oversee quality audits, review documentation, and ensure compliance with regulatory and industry standards
• Analyze quality data to identify trends and opportunities for improvement.
• Train and support team members on quality procedures and compliance requirements.

Information Security Audit Duties

• Schedule, review prepared evidence and attend security assessments of infrastructure, systems, applications, networks, and cloud environments to identify vulnerabilities.
• Work with the Business Excellence team to execute audit programs, including risk assessments, evidence collection and ISAP training completion
• Review and update all documents (Manuals, Guidelines, Policies, Procedures, Plans, ect) related to HR, Information Security, Development, Operations and Business Excellence annually
• Ensure compliance with information security policies, frameworks, and certifications ISO27001, SOC2 Type 2, HIPPA, PCI DSS 4.0, HiTrust and other related regulations
• Collaborate with IT, operations, HR, and compliance teams to address security risks and implement controls.

Management & Coordination

• Lead or support audits (internal/external) for both quality and security domains.
• Prepare and present audit reports, findings, and improvement plans.
• Maintain accurate records of audit activities, findings, and corrective actions.
• Stay current on evolving quality and security standards, regulations, and best practices.

Required Qualifications

Education & Certifications

• Bachelors degree in engineering, science, quality management, information systems, or a related field.
• Experience with statistical process control, root cause analysis, and audit methodologies.

Skills & Experience

• Strong analytical, problem-solving, and attention-to-detail skills.
• Proficiency in audit tools, documentation systems, and compliance frameworks.
• Ability to work independently and as part of cross-functional teams.
• Excellent communication and interpersonal skills for reporting and collaboration.
• Experience in both quality assurance and information security auditing is highly valued.