Senior Information Security, Risk & Compliance Specialist (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Information Security, Risk & Compliance Specialist (Cybersecurity): Leading security audits and managing regulatory compliance frameworks for a global IoT transportation platform with an accent on SOC 2, ISO 27001, and FedRAMP standards. Focus on conducting technical risk assessments, managing supply chain security, and integrating AI-driven tools to automate compliance workflows.
Company
is a global leader in IoT and connected transportation, providing web-based analytics and data-driven solutions to help businesses manage fleets safely and sustainably.
What you will do
- Lead and oversee internal and external security audits across systems, processes, and network infrastructure.
- Manage compliance with regulatory frameworks including SOC 2 Type 2, ISO 27001, NIST SP 800-53, and FedRAMP.
- Conduct hands-on technical security risk and supply chain risk assessments.
- Develop and maintain security policies, standards, and governance documentation.
- Assess and manage third-party and vendor security risks through ongoing monitoring.
- Adopt and champion AI tools to enhance security workflows and automate compliance tasks.
Requirements
- 5-8 years of experience in security evaluation, analysis, or risk assessments within a technology-focused industry.
- Deep familiarity with security compliance frameworks like SOC 2, ISO 27001, NIST, and FedRAMP.
- Experience leading end-to-end security audits, including planning, evidence collection, and remediation tracking.
- Strong technical competence in security tool use and GRC platforms.
- Excellent verbal and written communication skills with the ability to present to stakeholders.
- Post-secondary diploma or degree in Computer Science, Engineering, or a related field.
Nice to have
- Professional certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Auditor.
Culture & Benefits
- Flexible hybrid working model supporting both in-person and virtual work.
- Competitive medical and dental benefits and retirement savings program.
- Home office reimbursement program and electric vehicle purchase incentive.
- Baby bonus and parental leave top-up program.
- Opportunities for online learning and professional networking.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →