What you'll do:

• Conduct thorough web application and API security assessments to identify vulnerabilities and suggest mitigations.
• Implement robust security measures for servers, databases, and Docker environments.
• Manage secure configurations for cloud environments, primarily AWS and Azure.
• Develop strategies for data loss protection and endpoint security.
• Maintain and enhance our Information Security Management Systems ISMS.
• Ensure compliance with ISO 27001 2013, ISO 27701, SOC 2, GDPR, and other regulatory requirements.
• Conduct risk assessments and treatment plans to address potential security threats.
• Oversee information systems auditing and third-party risk management.
• Evaluate and recommend security tools and services to meet business needs.
• Lead customer assessments related to application and cloud security.

What makes you a great fit:

• 3+ years of relevant experience.
• Proven experience in platform security, particularly in a cloud-based environment.
• Strong understanding of web application security, API security, and infrastructure security.
• Familiarity with security frameworks and standards such as ISO 27001, and SOC 2, GDPR, CCPA
• Excellent problem-solving skills and the ability to think critically about security challenges.
• Certified Information Systems Auditor CISA
• ISO Lead Auditor