Remote Cyber security Jobs · ISO 27001

Job listings

  • Improve automated security assurance workflows to reduce manual effort and increase consistency.
  • Streamline collection and analysis of security evidence to improve audit readiness and visibility.
  • Enhance efficiency of access reviews, control testing, and risk assessments through technical automation.

Chainlink is the industry-standard oracle platform bringing capital markets onchain and powering decentralized finance. It has enabled tens of trillions in transaction value and is adopted by major financial institutions and protocols, with a remote-first culture.

  • Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
  • Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
  • Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.

Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.

  • Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
  • Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
  • Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.

Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.

$134,870–$197,809/yr

  • Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
  • Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
  • Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.

Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.

$175,000–$190,000/yr

  • Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
  • Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
  • Automate compliance processes using Tines and operate continuous control monitoring.

Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.

$6,024–$10,843/yr

  • Monitor, triage, and resolve security alerts in Microsoft Defender XDR and Sentinel.
  • Lead incident response end-to-end and maintain ISO 27001 documentation and audits.
  • Administer IAM, PAM, and patch management to enforce least privilege and compliance.

Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate models across generative AI, LLMs, computer vision, and speech. With over 1 million contributors in more than 200 countries, the company fosters a culture of innovation, collaboration, and humility.

$30,000–$45,000/yr

  • Execute PawaPay's cybersecurity programme across West Africa with risk assessments, vulnerability reviews and security control assessments.
  • Coordinate regional incident response and drive remediation of vulnerabilities, audit findings and security risks with Engineering and Operations.
  • Act as primary cybersecurity contact for West Africa, supporting regulators, audits, and security awareness initiatives.

PawaPay is a pan-African fintech enabling local payment channels for the mass market, processing over 4 million transactions daily across 20 African countries. It has an entrepreneurial, modern culture and a remote team across Europe, Africa and Asia.

  • Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
  • Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
  • Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.

Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.

  • Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
  • Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
  • Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.

The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.

  • Own end-to-end delivery of GRC engagements across ISO 27001, SOC 2, and GDPR.
  • Manage multiple concurrent client engagements with high autonomy and consistent quality.
  • Develop reusable GRC methodologies and AI-assisted compliance workflows.

A GRC consulting firm delivering Governance, Risk, and Compliance programs across ISO 27001, SOC 2, and GDPR for international clients. Operates with a remote, collaborative culture emphasizing trust, transparency, and high-autonomy delivery.