Senior Information Security, Risk & Compliance Specialist

📋 Description

• Lead internal and external security audits across systems and networks
• Develop and maintain security policies and governance docs
• Manage security risk across vendors and third parties
• Ensure SOC 2 Type 2, ISO 27001, NIST SP 800-53, FedRAMP compliance
• Collaborate with cross-functional teams to embed security controls
• Act as SME for security risk management and risk assessments

🎯 Requirements

• 5-8 years in security evaluation, risk, or compliance in tech
• System and network security engineering knowledge
• Deep familiarity with SOC 2 Type 2, ISO 27001, NIST SP 800-53/171, FedRAMP
• Experience leading end-to-end security audits (planning, evidence, remediation)
• Third-party and supply chain risk management experience
• Proficient with security tools and GRC platforms

🎁 Benefits

• Flexible hybrid working model
• Home office reimbursement
• Baby bonus and parental leave top up
• Online learning and networking opportunities
• Electric vehicle purchase incentive
• Competitive medical and dental benefits and retirement savings