Senior Information Security Specialist
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Information Security Specialist advancing GRC, third-party risk, compliance, and incident readiness. Supporting Halcyon’s adaptive platform dedicated to stopping ransomware.
Responsibilities:
- Perform and maintain third-party risk assessments and track vendor remediation activities.
- Support coordination and analysis of internal and external security testing, including vulnerability scans and penetration tests.
- Develop, track, and follow up on corrective action plans for identified security gaps or audit findings.
- Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations.
- Partner with engineering and operations teams to ensure implementation of security and compliance requirements across the organization.
- Assist in developing, maintaining, and communicating information security policies, standards, and procedures.
- Coordinate security incident response planning, disaster recovery testing, and business continuity exercises.
- Monitor and support enforcement of technical and administrative security controls across the enterprise.
- Stay current with evolving security and privacy regulations and frameworks, including SOC 2, ISO 27001, TX-RAMP, and FedRAMP.
Requirements:
- 5+ years of experience in information security, GRC, or IT risk management.
- Strong understanding of cybersecurity concepts, controls, and risk frameworks.
- Demonstrated experience with third-party risk management processes and tooling.
- Proven ability to coordinate security testing and vulnerability management efforts.
- Excellent communication, documentation, and cross-functional collaboration skills.
- Ability to assess and implement technical and administrative controls across cloud and hybrid environments.
- Experience with regulatory compliance and audit support in fast-paced environments.
- Experience with compliance platforms such as Drata or Vanta is a bonus.
- Knowledge of security frameworks such as NIST 800-53 or CIS Controls is a bonus.
- Familiarity with secure software development practices or DevSecOps principles is a bonus.
- Background in auditing or supporting third-party security assessments is a bonus.
- Experience with Microsoft 365 and/or Google Workspace security configuration is a bonus.
- Exposure to HIPAA, GDPR, or CCPA is a bonus.
- Certifications such as CISSP, CISA, CISM, Security+, or similar are a plus.
Benefits:
- Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents.
- Short and long-term disability coverage, basic life and AD&D insurance plans.
- Medical and dependent care FSA options.
- 401k plan with a generous employer contribution.
- Flexible PTO policy.
- Parental leave.
- Generous equity offerings.
Similar Jobs
Senior Security Control Assessor – FedRAMP 3PAO
Senior FedRAMP assessor leading cloud security compliance audits for Insight Assurance, a global cybersecurity and compliance audit firm. Evaluating NIST controls and mentoring assessment teams.
Junior Information Security and Privacy Consultant
Consultor de segurança da informação e privacidade apoiando assessments, avaliações de riscos e adequação a frameworks. Elaborando relatórios e recomendações para projetos de clientes diversos.
Security Impact Analysis Engineer
SIA Engineer supporting TSA information-system security impact analyses and RMF compliance. Evaluating cybersecurity risks, controls, architectures, and authorization documentation for Titan Technologies.
Senior Security Control Assessor, SCA
Senior Security Control Assessor supporting TSA’s cybersecurity governance, risk, and compliance mission. Evaluating security controls, authorization packages, vulnerabilities, and remediation activities.
Senior Cybersecurity Engineer, TS/SCI Clearance Required
ACAS cybersecurity engineer managing Nessus-based vulnerability assessment and DoD compliance. Supporting Air Operation Center cybersecurity, remediation, and incident reporting.
Head of Cyber Security
Head of Cyber Security leading cybersecurity strategy and governance for ABB’s global Process Control Platform. Protecting automation products through risk management, compliance, Linux and Kubernetes expertise.
Staff Product Security Engineer
Staff Product Security Engineer leading penetration testing across Guidewire’s cloud insurance platform. Securing web applications, APIs, SaaS architectures, and AI-powered product features.
Information Systems Security Officer
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.