Information Security Engineer

About the role

We are looking for a motivated Information Security Engineer to strengthen our governance, risk, and compliance (GRC) program. The ideal candidate will have hands‑on experience with ISO 27001, HIPAA, and SOC 2, and will help maintain our Information Security Management System.

Key responsibilities

• Maintain and improve the ISMS in line with ISO 27001 and ISO 42001.
• Support compliance initiatives for HIPAA and SOC 2.
• Conduct risk assessments, document findings, and propose remediation.
• Assist in preparation for internal and external audits.
• Collaborate with cross‑functional teams to raise the overall security posture.
• Contribute to security awareness training programs.
• Participate in security incident investigations and root‑cause analysis.

Required profile

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience.
• ISO 27001 Lead Implementer certification (mandatory).
• 2–3 years of experience in GRC‑focused information security roles.
• Direct involvement in ISO 27001 implementation/maintenance and HIPAA/SOC 2 compliance projects.

Required skills

• ISO 27001
• HIPAA
• SOC 2
• ISO 42001
• NIST framework
• CIS Controls
• GDPR