Senior Specialist, ISO & Management Systems

CyrusOne is seeking a Senior Specialist, ISO & Management Systems to own defined workstreams within the Data Center ISO certification program and support consistent governance, risk, and compliance practices. This individual-contributor role is fully proficient in its discipline, works with limited oversight, and partners across Facilities, Engineering, Construction, Energy, Sustainability, Safety, Legal, site teams, and internal and external auditors.
The specialist sets organizational standards and priorities for assigned certification and audit workstreams, translates Integrated Management System requirements into practical expectations, and drives quality delivery from site readiness and evidence collection through corrective-action closure and reporting. The role manages moderately complex work with cross-functional touchpoints, balances data, process, and stakeholder needs, and escalates material risks or resource constraints. Current priorities include ISO 50001 Energy Management, ISO 14001 Environmental Management, and ISO 45001 Occupational Health and Safety, with potential support for ISO 9001 and other standards within an integrated management system.

What You Will Do

ISO Certification and Management Systems

• Own assigned certification workstreams and translate ISO requirements into practical processes, controls, evidence standards, and accountable ownership.
• Establish and maintain organizational standards, priorities, workplans, and status reporting for assigned sites, standards, or certification activities.
• Coordinate implementation and continual improvement activities for the Energy, Environmental, and Occupational Health and Safety management systems.
• Plan and facilitate gap assessments, internal audits, management reviews, readiness reviews, and external certification activities within assigned scope.
• Serve as an operational contact for certification bodies, auditors, consultants, business locations, and internal stakeholders for assigned workstreams.
• Track findings, nonconformities, corrective actions, and improvement opportunities through evidence-based closure and effectiveness review.
• Coordinate root-cause analysis and partner with process owners to develop corrective actions that address systemic causes.
• Maintain accurate policies, procedures, registers, process maps, records, and document-control practices for assigned areas.
• Monitor changes to applicable standards, identify impacts, and coordinate transition actions with cross-functional partners.

Audit Workflow Management

• Own defined components of the internal and external audit workflow, including readiness assessments, registrar coordination, Stage 1 and Stage 2 activities, surveillance audits, recertification, scope extensions, agendas, logistics, action registers, and closeout records.
• Develop risk-based internal audit plans for assigned scope using shared Annex SL and standard-specific requirements for ISO 9001, ISO 14001, ISO 45001, and ISO 50001.
• Prepare integrated checklists, sampling approaches, interview and site schedules, evidence requests, and workpapers appropriate to the audit objective.
• Coordinate evidence, interviews, responses, and corrective-action follow-up through validated closure.
• Protect auditor independence and segregation of duties by identifying conflicts, ensuring individuals do not approve their own corrective actions, and escalating competence or independence concerns.

GRC Program Administration

• Administer assigned GRC workflows, including user access, control libraries, evidence requests, issues, corrective actions, certifications, attestations, and reporting.
• Maintain accurate mappings among requirements, risks, controls, processes, sites, evidence, and responsible owners.
• Establish recurring evidence-collection, review, certification, and attestation schedules for assigned workstreams.
• Develop and maintain dashboards that show audit readiness, overdue actions, control status, certification milestones, and recurring risk themes.
• Use data and stakeholder feedback to improve workflow efficiency, data quality, and adoption of GRC processes.

Program Coordination and Reporting

• Lead cross-functional working sessions for assigned workstreams and communicate requirements in clear, operational language.
• Partner with subject-matter experts and process owners to define objectives, metrics, operational controls, monitoring methods, and evidence expectations.
• Develop role-based training, tools, templates, and awareness materials that establish consistent organizational standards.
• Prioritize assigned work based on certification risk, deadlines, business impact, and stakeholder needs.
• Escalate certification risks, overdue actions, control weaknesses, decision needs, and resource constraints with clear supporting data.
• Prepare concise program updates for leadership and management-review meetings.
• Identify opportunities to integrate management-system activities and reduce duplicated controls, audits, evidence requests, and documentation.

What We Are Looking For

Required

• Bachelor's degree in business, environmental management, engineering, occupational safety, quality, energy, risk management, compliance, or equivalent professional experience.
• Five or more years of relevant experience in compliance, management systems, EHS, operational risk, internal audit, or certification program coordination.
• Direct experience implementing, maintaining, or auditing at least two of the following in a critical-service, data center, or manufacturing environment: ISO 14001, ISO 45001, and ISO 50001.
• Demonstrated ability to independently manage defined, moderately complex workstreams involving multiple sites, standards, deadlines, and cross-functional partners.
• Strong project management, facilitation, analytical, prioritization, and written communication skills.
• Ability to balance data, process requirements, stakeholder needs, and delivery risk when setting priorities and recommending actions.
• Ability to influence process owners and senior stakeholders without direct authority and apply professional skepticism when evaluating evidence.
• Working knowledge of ServiceNow, Microsoft 365, Microsoft Copilot, GRC platforms, or comparable document-control and compliance workflow systems.

Preferred

• Experience supporting ISO 14001, ISO 45001, ISO 50001, and ISO 9001 in a multi-site organization.
• Internal-auditor or lead-auditor training aligned to ISO 19011, with experience planning, conducting, documenting, and following up management-system audits.
• Experience integrating multiple ISO management systems into a shared audit, control, and evidence framework.
• Professional certification such as CEM, CHMM, CSP, or an equivalent credential.
• Experience with energy-performance indicators, energy baselines, environmental-aspect registers, hazard assessments, quality process mapping, or legal-requirements registers.

Work Environment

• Standard corporate office environment with periodic visits to data center facilities to support audits, evidence gathering, and site readiness.
• Willingness to adjust hours as needed to meet audit and certification deadlines.
• Ability to travel approximately 10-25% across company sites and regions.

CyrusOne is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

CyrusOne provides reasonable accommodation for qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and any other state or local laws. We will respond to requests for reasonable accommodations to assist you in applying for positions at CyrusOne, or to submit a resume.