Information Security Specialist

Tasks

• Build security framework
• Conduct incident response investigations
• Conduct phishing simulations
• Conduct vendor and third-party risk assessments
• Develop security policies and runbooks
• Document incident postmortems
• Implement AI governance frameworks
• Improve post incident processes
• Maintain ISO 27001 control monitoring
• Manage identity and access management
• Manage security tooling DLP
• Manage security tooling EDR
• Manage security tooling SIEM
• Manage vulnerability management
• Monitor emerging security threats
• Perform incident containment
• Perform risk assessments
• Prepare SOC 2 audits
• Recommend actionable security improvements
• Run security awareness training
• Run security scanning and triage
• Support penetration testing
• Support secure application architecture
• Track vulnerability remediation and reporting

Perks/Benefits

• Home office stipend
• Inclusive collaborative culture
• Medical, dental & vision coverage
• Mental health support
• Parental leave
• Professional development budget
• Remote-first work environment
• Unlimited paid time off
• Wellness stipend

Skills/Tech-stack

AI Governance | AWS | Application Security | Awareness Training | Cloud Security | Cloud platform | Cybersecurity | DLP | EDR | Endpoint protection | Google Cloud | Google Cloud Platform | IAM | ISO 27001 | Incident Response | Information security | Penetration Testing | Phishing Simulations | Policy Development | Risk Assessment | Risk Management | SIEM | SOC 2 | Secure Architecture | Security Awareness Training | Security Policy | Security Policy Development | Security awareness | Third Party | Third-Party Risk | Third-party risk management | Vendor Risk | Vendor risk management | Vulnerability Management | Vulnerability scanning