About the Role:
We are seeking a motivated Information Security Engineer with a strong foundation in compliance frameworks. The ideal candidate will have hands-on experience with ISO 27001, HIPAA, SOC 2 and conducting risk assessments.
Key Responsibilities:
● Governance, Risk & Compliance
○ Maintain and improve the organization’s Information Security Management System (ISMS) in alignment with ISO 27001 and AIMS in alignment to ISO 42001.
○ Support compliance efforts for HIPAA and SOC 2 frameworks.
○ Conduct risk assessments, document findings, and recommend remediation strategies.
○ Assist in preparing for internal and external audits.
○ Work with cross-functional teams to improve security posture.
○ Contribute to security awareness training programs.
○ Assist in security incident investigations and root cause analysis.
Requirements
● Certifications:
○ Mandatory: ISO 27001 Lead Implementer (LI)
● Experience:
○ 2–3 years in information security roles covering GRC domain
○ Hands-on involvement in ISO 27001 implementation/maintenance, HIPAA, and SOC 2 compliance projects.
Desired Skills:
● Knowledge of security standards such as NIST, CIS Controls, and GDPR.
● Strong report writing and communication skills for both technical and non-technical audiences.