Information Security Specialist

Tasks

• Assess vendor security posture
• Build security framework
• Conduct phishing simulations
• Conduct security vulnerability scanning
• Conduct third-party risk assessments
• Contain security incidents
• Develop security policies standards and runbooks
• Document incident response actions
• Implement AI governance frameworks
• Improve post incident processes
• Investigate security incidents
• Lead incident response
• Manage endpoint protection with EDR
• Manage identity and access management
• Manage security tooling
• Monitor compliance controls
• Monitor emerging security threats
• Monitor security events with SIEM
• Own vulnerability management
• Perform risk assessments
• Prepare SOC 2 audit evidence
• Prevent data exfiltration with DLP
• Recommend actionable security improvements
• Run security awareness programs
• Support ISO 27001 audits
• Support application security practices
• Support penetration testing
• Support secure architecture reviews
• Track vulnerability remediation
• Triage security vulnerabilities

Perks/Benefits

• Health coverage
• Home office stipend
• Inclusive culture
• Parental leave
• Professional development budget
• Remote-first work environment
• Unlimited paid time off
• Wellness stipend

Skills/Tech-stack

AI Governance | AWS | Access Management | Application Security | Cloud Security | Cybersecurity | DLP | EDR | GCP | IAM | ISO 27001 | Identity & Access | Identity & Access Management | Incident Response | Information security | Penetration Testing | Risk Assessment | Risk Management | SIEM | SOC 2 | Secure Architecture | Security awareness | Security policies | Security runbooks | Third Party | Third-Party Risk | Vendor Risk | Vendor risk management | Vulnerability Management | Vulnerability scanner | Vulnerability scanning