{"id":2957315,"url":"https://alion.io/job/workera-information-security-operations-specialist-contract","title":"Information Security Operations Specialist (Contract)","company":{"id":694137,"name":"Workera","domain":"workera.com","url":"https://alion.io/company/workera","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["India"],"countries":["IN"],"hiring_countries":["US","IN"],"hiring_countries_total":2,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Canva","optional":false},{"name":"Elixir","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-20T18:58:43Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-25T08:06:34Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Information Security Operations Specialist (SecOps & GRC)\nContractor | Workera\nRole type: Contractor (40 hours)\nReports to: Staff People Engineer\nKey partners: Infrastructure, Engineering, Product, IT, and GRC & Data Privacy.\nLocation: Americas \nAbout the role\nWorkera is seeking a hands-on Information Security Operations Specialist to own day-to-day technical security operations and the operational maintenance of our security frameworks in Vanta.\nThis role independently interprets Vanta tests and maintenance requirements, coordinates technical evidence and remediation, and brings practical security expertise to vulnerability management, penetration testing, and security improvements. The GRC lead owns program direction, governance, and audit coordination. Customer security questionnaires are transitioning to another team; this role provides technical subject-matter support and validation rather than serving as the default questionnaire owner.\nResponsibilities\nTechnical security operations\nOwn vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable.\nCoordinate penetration testing and DAST: define scope, manage providers and access, review findings, track remediation, and organize retesting.\nTriage and prioritize findings based on severity, exposure, exploitability, and business impact; drive remediation with Engineering and Infrastructure, verify closure, and escalate overdue issues.\nPartner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction.\nUpskill Workera teams on vulnerability management, remediation practices, secure configuration, and security testing.\nMaintain practical security documentation, metrics, remediation records, and technical response playbooks.\nGRC & Vanta maintenance\nMaintain Vanta tests and maintenance activities across SOC 2, ISO 27001, and ISO 42001.\nIndependently read and interpret Vanta tests, map technical requirements to owners and evidence, identify gaps, and coordinate timely completion.\nCollect and validate technical evidence, support control operation and testing, document exceptions and remediation, and prepare for audits and assessments.\nPartner with the GRC lead to translate framework requirements into clear technical actions while the GRC lead retains ownership of the overall program.\nVendor risk & technical questionnaire support\nLead vendor risk assessments, review SOC 2 reports and other security materials, document risks, and track follow-up actions.\nProvide technical subject-matter expertise for customer security questionnaires and due diligence requests as questionnaire ownership transitions elsewhere.\nValidate technical responses and supporting evidence for accuracy, consistency, and alignment with implemented controls.\nSupport cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls as business needs evolve.\nWho you are\nA self-starter who can take ownership, create momentum, and operate independently in an evolving environment.\nA clear translator who can turn technical security concepts into concise, practical guidance that the broader organization can understand and act on.\nA quick learner who can absorb new systems, tools, and business context at startup speed.\nA thoughtful prioritizer who can distinguish urgent from important, focus on the highest-risk work, and adapt as priorities change.\nRequired capabilities\nHands-on experience with vulnerability management, penetration testing design, security testing, remediation coordination, and technical security operations in a SaaS environment.\nWorking knowledge of SOC 2, ISO 27001, and ISO 42001, with the ability to translate control requirements into technical evidence and actions.\nHands-on experience with OWASP principles and security practices across AWS, Kubernetes, Elixir Programming Language\nExperience using a compliance or security platform such as Vanta and independently interpreting tests, maintenance tasks, and evidence requirements.\nAbility to work effectively with Engineering and Infrastructure teams, explain security issues clearly, and upskill others without creating unnecessary process.\nStrong judgment, documentation, prioritization, and communication skills; comfortable operating independently as a contractor.\nWhat success looks like\nVulnerabilities have clear owners, deadlines, remediation plans, and verified closure.\nPenetration tests and security testing cover agreed scope, with findings tracked through retesting.\nVanta maintenance and technical evidence for SOC 2, ISO 27001, and ISO 42001 remain current and audit-ready.\nWorkera teams have stronger, repeatable practices for vulnerability management and technical security operations.\nVendor risks and technical questionnaire inputs are accurate, actionable, and appropriately owned.\nAbout Workera\n We're a Silicon Valley company backed by NEA, Jump Capital, and Owl Ventures. Our founder is Kian Katanforoosh, an award-winning Stanford Computer Science Lecturer who has taught AI to over 1 million people. Our Chairman is Dr. Andrew Ng, co-founder of Coursera, CEO of DeepLearning.AI, and founding lead of the Google Brain project.\nOur clients include Accenture, Siemens Energy, Samsung, and the United States Air Force.\nNamed to Fast Company's Most Innovative Companies list alongside Microsoft and Canva. Recognized by the World Economic Forum's Tech Pioneers, Inc 5000, and Josh Bersin's HR Tech AI Trailblazers. In a world where every company claims to 'do AI', at Workera, it's actually in our DNA.\nWe're learners, builders, and dreamers. Join us.\n Workera is committed to providing an inclusive and respectful environment where equal employment opportunities are available to all applicants and employees. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), national origin, age, disability, genetic information, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law. Hiring decisions are based on qualifications, merit, mindset, and business need.","description_format":"text","description_chars":6303,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["EdTech Platforms"],"lifecycle":[{"event":"open","at":"2026-10-20T21:55:08Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.859,"p_room":1,"age_days":4,"expected_fill_days":27,"reasons":["conf:1","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/workera-information-security-operations-specialist-contract","json_url":"https://alion.io/job/workera-information-security-operations-specialist-contract.json","meta":{"generated_at":"2026-10-25T11:47:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16934,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":694137},"rest":"https://alion.io/mcp/rest/get_company?id=694137"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fworkera-information-security-operations-specialist-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fworkera-information-security-operations-specialist-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fworkera-information-security-operations-specialist-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/workera-information-security-operations-specialist-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fworkera-information-security-operations-specialist-contract"}]}