Apply on Employer Site

Corporate Visions · 5 days ago

Information Systems Security Engineer

United States

Full-time

Remote

Senior Level

$90K/yr - $130K/yr

5+ years exp

Corporate Visions Inc is a fully remote work environment seeking an experienced Information Systems Security Engineer. This role is responsible for managing the day-to-day operations of security and privacy programs, maintaining SOC 2 certification, and ensuring compliance with global privacy regulations.

B2BContentMarketingMessagingSalesSales EnablementTraining

No H1B

Responsibilities

Administer and manage security platforms, including our GRC tool (Vanta), vulnerability scanners (Astra, Snyk), and endpoint security (Sophos)

Establish and maintain the company's Security Information and Event Management (SIEM) platform for log correlation and threat detection

Serve as the subject matter expert for security and privacy, assisting sales and legal teams with customer questionnaires, Data Processing Agreement (DPA) reviews, and inquiries related to GDPR and other global privacy regulations

Manage and maintain Corporate Visions' privacy program, including maintaining records of processing activities (ROPA) and managing the subprocessor list

Serve as a security liaison to the product development teams, ensuring new products and features conform to security and privacy-by-design standards

Own and manage the employee security awareness program, including phishing simulations and training campaigns

Lead the development and implementation of new compliance programs as required (e.g., ISO 27001)

Develop, track, and report on key security and privacy program KPIs to leadership

Qualification

GDPR experienceGRC platforms (Vanta)SOC 2 complianceISO 27001 complianceSIEM implementationVulnerability managementCloud security (AWS)Privacy-focused certificationsRelevant security certificationsCommunication skills

Required

Bachelor's degree in related field or equivalent experience in lieu of degree

5+ years of experience in a hands-on security or privacy role

Demonstrated experience with GRC platforms (e.g., Vanta) and managing controls for compliance frameworks like SOC 2 or ISO 27001

Must have a deep understanding of global privacy regulations, particularly GDPR; experience with vulnerability management tools and processes; excellent written and verbal communication skills