Performs GDPR-driven security work for an insurtech serving insurance agencies, brokers and insurers: reviews access rights, runs vulnerability scans, monitors logs and alerts, keeps policies and the asset inventory current, and prepares evidence for client security questionnaires and audits. Core needs are networking and Windows/Linux basics; a SIEM, Security+ and ISO 27001 are pluses.