Key skills
CloudCyber SecurityFirewallsActive DirectoryLeadershipCloud Security
About this role
Role Overview
- Own and drive ISO 27001 certification efforts, including risk registers, nonconformities, and corrective actions
- Support SOC 1 Type 2 audit readiness and remediation initiatives
- Lead Quality Management System (QMS) audits
- Support Data Loss Prevention (DLP) initiatives and assessments
- Assist with Vendor Security Management Program activities
- Evaluate and monitor security technologies (e.g., firewalls, endpoint protection, IDS, VPN, MFA)
- Validate system configurations for compliance with security standards
- Monitor server logs, network traffic, and security alerts
- Analyze findings and recommend remediation actions
- Assess and implement security patches, upgrades, or reconfigurations
- Support Windows infrastructure environments (e.g., Active Directory, Group Policy)
- Apply cloud security best practices across enterprise systems
- Maintain awareness of privacy and security frameworks (e.g., ISO 27701)
- Mentor junior cybersecurity staff and collaborate with senior team members
- Independently manage compliance projects and initiatives
- Report project status and compliance progress to leadership
Requirements
- Bachelor’s degree in Computer Information Systems, Cybersecurity, or related field or equivalent work experience
- Minimum of 5 years of experience in cybersecurity, information security, or IT systems
- Certified ISO/IEC 27001:2022 Lead Auditor (BSO Lead Auditor) certification
- CISSP or equivalent information security certification
- Proven hands‑on experience driving ISO 27001 compliance initiatives
Tech Stack
- Cloud
- Cyber Security
- Firewalls
Benefits
- Medical, dental, vision
- Generous PTO plan and paid sick time
- Flexible work arrangements
- 401K with Profit Sharing
- Wellness program
- Generous parental leave
- 11 paid holidays