Information Security Analyst

📋 Description

• Lead ISO27001 and SOC2 audits; primary auditor contact.
• Own client audits and RFIs; translate controls for stakeholders.
• Apply GRC lens to AWS cloud governance; align with CIS benchmarks.
• Monitor security tools; triage incidents from discovery to post-mortem.
• Conduct third-party risk due diligence on suppliers and integrations.
• Perform risk assessments and provide actionable guidance.

🎯 Requirements

• 3-5 years in Information Security with full-stack security or GRC.
• Experience triaging CSPM/SIEM/EDR; incident management.
• Build processes; turn problems into implemented solutions.
• Led SOC2 or ISO27001 audits; manage evidence and expectations.
• Certifications: CISA, CISSP are a plus; practical security experience valued.

🎁 Benefits

• Share Options
• 20 days PTO per year + public holidays
• 3 volunteer days
• Private health insurance package
• 401k contribution plan
• Work from home stipends