Security Compliance Specialist

About the role

We are looking for a Security Compliance Specialist to strengthen our security, compliance and governance initiatives across a remote workforce. The role ensures adherence to industry standards, regulatory requirements and internal policies while supporting a robust security posture.

Key responsibilities

• Monitor and maintain compliance with applicable security standards, regulations and internal policies.
• Assist in the implementation and management of security and compliance frameworks.
• Conduct security risk assessments, gap analyses and compliance reviews.
• Support internal and external audits, assessments and certification activities.
• Develop, review and maintain security policies, procedures and documentation.
• Collaborate with IT, engineering, legal and business teams to meet compliance requirements.
• Track remediation activities and ensure timely resolution of identified issues.
• Monitor regulatory developments and recommend policy or process updates.
• Support vendor risk management and third‑party security assessments.
• Deliver security awareness and compliance training when required.

Required profile

• Bachelor's degree in Information Security, Cybersecurity, IT, Computer Science, Risk Management or a related field.
• 2–5+ years of experience in security compliance, information security, risk management, audit or governance.
• Strong analytical, documentation and problem‑solving abilities.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple initiatives.

Required skills

• Knowledge of security frameworks and standards such as ISO 27001, SOC 2, NIST, CIS Controls, GDPR, PCI DSS.
• Experience with cloud security environments (AWS, Azure, Google Cloud).
• Familiarity with vendor risk management and third‑party assessments.
• Understanding of security risk management principles.
• Professional certifications (e.g., Security+, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, CRISC, CISSP, CISM) are a plus.