Security & Compliance Specialist
First seen by Alion on Nov 11, 2026. suffescom scores B on the Alion truth index.
Company Description Suffescom Solutions Inc. is a digital transformation and software consulting company headquartered in New York, supporting startups, enterprises, and global brands in modernizing operations and accelerating growth through strategic technology services. Since 2013, the company has delivered business-focused consulting and advanced engineering solutions across more than 35 industries, including healthcare, fintech, retail, logistics, and eCommerce. Its expertise spans digital transformation, cybersecurity-aware software engineering, AI solutions, cloud technologies, data analytics, and application modernization. Suffescom has partnered with leading organizations such as Johnson & Johnson, Chevron, Patagonia, Levi Strauss & Co., Subaru, and NBCUniversal, building secure, scalable, and high-performing technology ecosystems. The team combines technical depth with agile methodologies to create solutions that drive lasting business impact for clients worldwide.
Job description:
We are looking for an Security & Compliance Specialist to manage information security, identify potential risks, and ensure compliance with industry standards and security policies.
Key Responsibilities-
- Monitor IT security systems and identify potential threats.
- Conduct vulnerability assessments and manage security risks.
- Assist in ISO 27001, SOC 2, and GDPR compliance activities.
- Support internal and external security audits.
- Maintain security policies, SOPs, and compliance documentation.
- Manage risk assessments, audit findings, and corrective actions (CAPA).
- Monitor endpoint security, access controls, and data protection.
- Coordinate with internal teams to resolve security issues.
Requirements
- 3–4 years of experience in IT Security, Information Security, or Compliance.
- Knowledge of ISO 27001, SOC 2, and GDPR.
- Experience in security audits, risk assessments, and vulnerability management.
- Understanding of endpoint security, access management, and incident response.
- Good documentation and communication skills.