Staff Security Engineer

Requirements

• 5 years of experience in information security, GRC, or compliance-focused roles
• Deep familiarity with ISO 27001 and SOC 2 Trust Services Criteria
• Comfort operating across the full breadth of an Information Security Management System (ISMS)
• Demonstrated experience writing and revising security policies
• Ability to track gaps and remediation plans

Nice to Haves

• Relevant industry certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor/Implementer)

What You'll Be Doing

• Maintain and mature the ISMS, including risk treatment plans and management review processes
• Support ISO 27001 and SOC 2 Type 2 audit execution
• Contribute to audit-specific narrative documentation
• Lead the policy program and drive policy creation and revision
• Partner with cross-functional teams to gather evidence and drive compliance

Perks and Benefits

• Performance-based bonus plans
• Rich medical, dental, and vision coverage
• Generous retirement contributions with immediate vesting
• Wellness days, country-specific holidays, and birthday off
• Professional development budget and well-being stipend
• Paid parental leave and employee referral bonus program