Senior Information Security Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct and sustain third-party risk evaluations while monitoring vendor remediation efforts.

• Aid in the coordination and analysis of both internal and external security assessments, including vulnerability scans and penetration testing.

• Create, monitor, and follow up on corrective action strategies for any identified security vulnerabilities or audit issues.

• Work alongside managed security service providers and internal teams to oversee and address security events and escalations.

• Collaborate with engineering and operations departments to guarantee the enforcement of security and compliance mandates throughout the organization.

• Help in formulating, maintaining, and disseminating information security policies, standards, and procedures.

• Organize security incident response preparation, disaster recovery testing, and business continuity drills.

• Supervise and facilitate the enforcement of both technical and administrative security measures across the organization.

• Keep updated with the latest developments in security and privacy regulations and frameworks, including SOC 2, ISO 27001, TX-RAMP, and FedRAMP.

⛳️ Requirements

• Over 5 years of experience in information security, governance, risk management, or IT risk management.

• Strong knowledge of cybersecurity principles, controls, and risk management frameworks.

• Proven experience with processes and tools related to third-party risk management.

• Established capability to coordinate security assessments and manage vulnerability mitigation initiatives.

• Exceptional communication, documentation, and collaborative skills across different functions.

• Proficiency in assessing and applying technical and administrative controls within cloud and hybrid environments.

• Experience with regulatory compliance and audit assistance in dynamic settings.

• Familiarity with compliance tools such as Drata or Vanta is an advantage.

• Understanding of security frameworks like NIST 800-53 or CIS Controls is a plus.

• Awareness of secure software development methodologies or DevSecOps practices is a plus.

• Background in conducting audits or supporting third-party security evaluations is a plus.

• Experience with security configurations for Microsoft 365 and/or Google Workspace is a plus.

• Exposure to regulations such as HIPAA, GDPR, or CCPA is an advantage.

• Certifications such as CISSP, CISA, CISM, Security+, or equivalent are beneficial.

🏝️ Benefits

• Comprehensive healthcare coverage (medical, dental, and vision), with full premium payment for employees and their dependents.

• Short-term and long-term disability insurance, along with basic life and AD&D insurance plans.

• Options for medical and dependent care flexible spending accounts (FSA).

• 401k retirement plan featuring a generous employer contribution.

• Flexible paid time off (PTO) policy.

• Parental leave benefits.

• Attractive equity offerings.