Information Security Specialist
New
IndiaFull-TimeMiddle
Salary151000 - 170000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 4+ years of experience
- Required Skills
- AWSGCPSaaS
Requirements
- 4+ years of experience in information security, cybersecurity, or a related technical field.
- Hands-on experience with compliance frameworks such as SOC 2 and ISO 27001.
- Strong understanding of cloud security (AWS, GCP, or similar).
- Strong understanding of IAM.
- Strong understanding of endpoint protection.
- Experience working with security tools such as SIEM, EDR, DLP, and vulnerability scanners.
- Solid knowledge of incident response processes and operational security practices.
- Experience in SaaS or distributed/remote-first environments.
- Strong written and verbal communication skills.
- Ability to simplify complex security concepts.
- Experience evaluating AI/ML tools for privacy and security risks (strong plus).
- Familiarity with vendor risk management and third-party security assessments.
- Security certifications (CISSP, CISM, Security+) are a plus but not mandatory.
Responsibilities
- Define and implement AI governance frameworks, including safe usage policies, risk assessments, and secure adoption guidelines.
- Own vulnerability management processes, including scanning, triage, remediation tracking, and reporting across systems and applications.
- Support compliance initiatives such as SOC 2 and ISO 27001, including audit preparation, evidence collection, and control monitoring.
- Lead incident response activities, including investigation, containment, documentation, and post-incident improvements.
- Manage and optimize security tooling such as SIEM, EDR, DLP, and identity/access management solutions.
- Conduct vendor and third-party risk assessments, including evaluation of SaaS and AI service providers.
- Develop clear, usable security policies, standards, and runbooks that support operational efficiency.
- Partner with engineering teams on application security practices, secure architecture, and penetration testing support.
- Drive security awareness programs, including training, phishing simulations, and AI literacy initiatives.
- Monitor emerging threats, especially AI-related risks, and translate insights into actionable recommendations.
View Full Description & ApplyYou'll be redirected to the employer's site
