5 дней назад
Information Security Engineer (AI)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Information Security Engineer (AI): Driving information security governance across ISO 27001, SOC 2, AWS, privacy, and AI/LLM risk management with an accent on audit readiness, enterprise risk, and security architecture. Focus on implementing control frameworks, coordinating remediation and incident processes, and designing secure cloud, data, and AI governance practices.
Location: Remote from anywhere in Turkey
Company
One is a woman-founded B2B SaaS product company providing an AI-powered customer data, personalization, and journey orchestration platform for marketing and customer engagement teams.
What you will do
- Drive implementation, maintenance, control maturity tracking, and audit readiness for the ISO 27001 Information Security Management System.
- Support SOC 2 Type II compliance, internal audits, evidence collection, findings management, and remediation tracking.
- Own enterprise risk management, including risk registers, scoring, risk acceptance, exceptions, and third-party security assessments.
- Provide AWS security governance covering cloud posture, IAM, logging, configuration baselines, and secure architecture reviews.
- Coordinate security findings, incident handling, business continuity, disaster recovery, threat modeling, and post-incident reviews.
- Develop security awareness, privacy, data protection, and AI/LLM governance practices across technical and business teams.
Requirements
- Strong knowledge of ISO 27001, ISMS processes, internal audits, and security control frameworks.
- Hands-on experience with risk management, business continuity, disaster recovery, vendor security, and third-party risk management.
- Solid understanding of AWS security governance, including IAM, logging, and baseline hardening.
- Familiarity with SOC 2 Type II, data classification, data protection, KVKK, and GDPR implementation.
- Strong documentation, reporting, communication, analytical, and stakeholder advisory skills.
- Excellent written and verbal English communication skills; willingness to provide on-call support when necessary.
Nice to have
- Familiarity with AI/LLM security risks and governance.
- Experience responding to customer security questionnaires and audits.
- Experience with ticketing systems such as Jira.
Culture & Benefits
- Fully remote work from anywhere in Turkey.
- Private health insurance and a monthly meal allowance.
- Access to learning platforms, internal training, and technology events.
- Eligibility-based ESOP, referral bonuses, volunteering, retreats, and team-building activities.
- Work with a distributed, diverse organization representing more than 50 nationalities.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →