{"id":3375291,"url":"https://alion.io/job/orfium-it-security-specialist","title":"IT Security Specialist","company":{"id":689161,"name":"Orfium","domain":"orfium.com","url":"https://alion.io/company/orfium-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Support","role_family":"Support","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"AWS","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"GitHub","optional":true}],"status":"live","first_seen_at":"2026-10-28T02:32:53Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-29T09:13:56Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We are seeking an experienced Security Specialist to join Orfium’s Cloud & Infrastructure team. In this role, you will help strengthen the security of our cloud platforms, infrastructure, engineering practices, and internal systems while supporting the continued maturity of our Information Security programme.\nYou will work closely with Cloud & Infra, Engineering, IT Operations, Legal, and business stakeholders to drive practical security improvements across areas such as cloud security, access governance, vulnerability management, security assessments, incident response, compliance, and security awareness\nResponsibilities\nSupport the execution of Orfium’s cloud security strategy and roadmap by creating and supporting security controls across our cloud platforms and workloads\nOversee IT security and data protection protocols across cloud-centric collaboration environments, ensuring secure operational continuity. .\nArchitect and sustain robust information governance frameworks to optimize data integrity, classification, and secure handling. \nEnsure strict adherence to cybersecurity standards and enforce complex regulatory compliance mandates across the organization. (ISO 27001, SOC2 etc…) \nRun and support with security assessments, vulnerability reviews, penetration testing activities, and remediation follow-ups.\nConfigure and administer stringent identity and access management (IAM) controls to systematically safeguard sensitive enterprise data. \nDeploy comprehensive Data Loss Prevention (DLP) strategies and proactively monitor network and endpoint activity for policy infractions.\nSupport business continuity, disaster recovery, vendor security reviews, and risk assessments.\nCollaborate with IT Operations on identity, access management, admin access, onboarding/offboarding controls, and security-related tooling. (Close work with Legal Team & IT )\nDeliver or support security awareness initiatives, helping employees understand threats such as phishing, social engineering, password security, device security, and safe internet practices.\nAuthor and maintain detailed technical documentation encompassing security controls, operational policies, and incident response procedures. \nStay up to date with emerging threats, security trends, and cloud security best practices, and translate them into practical improvements for Orfium.\nSupport with quarterly audit reviews, audit readiness, and evidence collection.\nRequirements\n3+ years of experience in security engineering, cloud security, infrastructure security, or a similar role.\nStrong understanding of cloud security, networking, IAM, application security, vulnerability management, and incident response.\nHands-on experience assisting with engineering and infrastructure teams to design and implement secure systems.\nExperience with ISO 27001, SOC 2, security audits, risk assessments, and compliance-related activities.\nFamiliarity with security tooling such as vulnerability scanners, cloud security controls, endpoint/security platforms, and access governance tools.\nAbility to investigate security issues, coordinate remediation, and communicate risks clearly to technical and non-technical stakeholders.\nStrong problem-solving skills, autonomy, ownership, and ability to manage multiple priorities.\nAbility to collaborate effectively with cross-functional teams, including Cloud & Infra, Engineering, Legal Team & IT Operations\nFluent English language communication skills, written and verbal.\nNice to Have\nExperience supporting security in SaaS, product, and data-heavy technology environments.\nExperience with AWS, GCP, GitHub security, CI/CD security, WAF, secrets management, or secure software development practices.\nFamiliarity with security awareness programmes, phishing response, tabletop exercises, and BCP/DRP processes.\nExperience with vendor security questionnaires, third-party risk, or customer security requirements.\nEager / Implement New Security Best Practice with the Organization\nSecurity certifications such as ISO27001 Lead Implementer , CEH, Security+, AWS Security Specialty, or similar.\nLove for music!\nBenefits\nCompetitive salary package and participation in our Stock Options plan\nHybrid work model with flexibility to support your lifestyle\nComprehensive private health and life insurance coverage\nExtra paid time off to recharge and take care of yourself\nThe latest tech equipment to support your productivity and creativity\nA collaborative, inclusive, and international work environment\nAbout Us\nWe are a global technology leader helping artists, songwriters, and copyright owners solve the most complex problems in the music industry through advanced rights management and data solutions. At Orfium, you’ll join a passionate, international team of developers, designers, scientists, and music lovers, all working together in a flexible, hybrid environment where innovation, openness, and ownership are at the heart of everything we do. We are looking forward to meeting with you!\nEEO / Accommodation\nAt Orfium, we are proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and candidates-regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.","description_format":"text","description_chars":5350,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Hybrid work","Insurance coverage","Life insurance","Stock options"],"hiring_locations":[{"name":"Sri Lanka","iso":"LK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Media & Entertainment","Music Industry"],"lifecycle":[{"event":"open","at":"2026-10-28T02:32:53Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":51,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/orfium-it-security-specialist","json_url":"https://alion.io/job/orfium-it-security-specialist.json","meta":{"generated_at":"2026-10-29T13:42:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20561,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":689161},"rest":"https://alion.io/mcp/rest/get_company?id=689161"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Forfium-it-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Forfium-it-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Forfium-it-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/orfium-it-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Forfium-it-security-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3375291}},{"tool":"search_jobs","arguments":{"company":"orfium.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3375291},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}