Lead Information Security & Compliance Specialist
Skills
Software As A ServiceContextData IntegrityEnhanced Data Rates For GSM EvolutionFirebaseISO 27001ISO Standards
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Experience leading SOC 2 or comparable compliance programs such as ISO 27001 HIPAA or PCI-DSS
- Recent experience preferred with at least 5 years and multiple audits or renewals preferred
- Background in SaaS environments with preference for logistics supply chain or short-haul trucking platforms
- Proven experience as a primary security contact for medium to large enterprises
- Strong exposure to secure processes across web mobile cloud infrastructure and APIs
- Ability to work hands-on with React and Node.js codebases to improve secure coding practices
- Direct experience with DevSecOps tools such as Snyk CI/CD pipelines internal penetration testing and Firebase or Firestore security rules
- Experience or strong capability in running prompt injection tests and securing LLM-powered chatbots
Nice to have
- Proactive
- Security-first mindset
- Strong communicator
- Process-oriented
- Hands-on
- Collaborative
Day to day
- Lead end-to-end SOC 2 compliance and maintain governance frameworks across the organization.
- Create, enforce, and oversee IT and information security policies while partnering with teams across the business.
- Act as a hands-on security engineer by reviewing secure coding practices testing AI features and strengthening DevSecOps and infrastructure security.