Senior Infosec Engineer

As a senior member of security and compliance, you will oversee security operations administration and work closely with the company's CISO.

Responsibilities:

• Overall technology evaluation and selection to meet the agreed-upon security architecture requirements.
• Ownership and execution of incident and breach response.
• Manage the information security architecture to provide confidentiality, integrity, and availability to the company's sensitive data.
• Manage the security awareness and training program.
• Communicate information security policies and acceptable use guidance to system users.
• Maintain all Security Awareness and Acceptable Use and Access Authorization Request Forms in Avaamo's internal collaboration tools and HR files.
• Complete the Avaamo onboarding procedural process for each new Avaamo employee or contractor.

Requirements:

• Bachelor's degree in computer science, information security, or a related field; advanced degree or relevant certifications (e. g., CISSP, CCNP, AWS Certified Security - Specialty) preferred.
• 8+ years of experience in data protection and security architecture engineering, focusing on cloud technologies.
• Expert-level knowledge of compliance requirements for SOC 2, ISO 27001, NIST 800-171, CSA-STAR, and CCPA.
• Expert-level knowledge of healthcare-related compliance requirements like HIPAA and HITRUST.
• Experience working with customers on security incidents.
• Experience working with customers on data breach incidents.
• Experience managing vendors to conduct VAPT, network scanning, and white-hat hacking.
• Excellent communication and collaboration skills, with the ability to effectively convey technical concepts to technical and non-technical stakeholders.

Skills

ISO, information security, infosec