Information Security Lead

Tech Stack

Responsibilities

• Maintain and improve the Information Security Management System (ISMS) to maintain relevant certifications (e.g., ISO 27001, SOC 2, IEC 81001-5-1 and UK Cyber Essentials Plus).
• Lead the technical security aspects of data privacy to ensure compliance with GDPR, CCPA, and HIPAA.
• Lead and mature the company's Security Operations Center (SOC) capabilities, including threat intelligence, monitoring, detection, and analysis.
• Responsible for collecting, analyzing, escalating, and responding to cybersecurity vulnerabilities, threats, and attacks using SIEM and EDR technologies.
• Collaborate with Engineering to ensure Secure Development Lifecycle (SDLC) practices are followed, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.

Benefits

• 401k
• Equity
• Gym Membership
• Health Insurance
• Learning Budget
• Unlimited PTO

Culture

Requirements