Compliance & Security Specialist

Day-to-Day Responsibilities

• Manage and maintain the organizations Information Security Management System (ISMS) and ensure compliance with ISO 27001, SOC 2, GDPR, and other applicable security standards.
• Handle customer security questionnaires, security assessments, and compliance documentation.
• Coordinate with internal teams and enterprise customers to address security and compliance requirements.
• Conduct security risk assessments, identify compliance gaps, and track remediation actions to closure.
• Coordinate internal and external security audits, maintain audit evidence, and ensure timely closure of audit observations.
• Develop, review, and maintain information security policies, procedures, standards, and documentation.
• Conduct vendor and third-party security assessments and monitor compliance with security controls.
• Support security incident documentation, investigations, and corrective and preventive actions.
• Prepare compliance reports, dashboards, and management updates.
• Drive security awareness initiatives and promote information security best practices across the organization.