Senior Information Security Engineer

What You Will Do:

• Drive the implementation, maintenance, and continuous improvement of the ISO 27001 Information Security Management System (ISMS).
• Support SOC 2 Type II compliance efforts, including control implementation, evidence collection, and audit coordination.
• Conduct and document internal audits, manage findings, and follow up on remediation plans across teams.

What You Will Need:

• Strong knowledge of ISO 27001, ISMS processes, internal audits, and control frameworks.
• Hands-on experience with risk management practices, including risk identification, scoring, and mitigation tracking.
• Solid understanding of AWS services and cloud security governance, including IAM, logging, and baseline hardening.

Soft Skills & Expectations:

• Strong analytical thinking and ability to assess both technical and business risks.
• Ability to take ownership of security domains and drive initiatives end-to-end.
• Excellent written and verbal communication skills in English.