Information Security Specialist

About the role

We are looking for an Information Security Specialist to lead our SOC 2 Type II compliance efforts and strengthen our overall security posture. You will work closely with engineering, DevOps, HR, and leadership to embed security best practices across the organization.

Key responsibilities

• Lead SOC 2 Type II compliance and audit readiness activities.
• Develop, maintain, and enforce security policies, procedures, and standards.
• Conduct risk assessments, gap analyses, and keep the risk register up to date.
• Perform internal vulnerability assessment and penetration testing (VAPT) for web applications and services.
• Manage firewalls, network security controls, and incident response processes.
• Collaborate with cross‑functional teams to integrate security into product development and operations.
• Prepare and present security reports for senior leadership.

Required profile

• Strong sense of ownership and ability to work independently.
• Experience with compliance frameworks such as SOC 2 and ISO 27001.
• Hands‑on VAPT and risk management expertise.
• Excellent communication and cross‑functional collaboration skills.

Required skills

• SOC 2 Type II compliance
• ISO 27001 framework
• Vulnerability assessment and penetration testing (VAPT)
• Firewalls and network security controls
• Security Information and Event Management (SIEM)
• IDS/IPS systems
• Cloud security (AWS, Azure, GCP)
• Scripting/automation for security tasks