Cybersecurity Specialist

Kraken Robotics Inc; Longmont (CO); Remote; USD 90,000 - 130,000; Full time

Job summary

Kraken Robotics is seeking a Cybersecurity Specialist to enforce security controls across corporate, cloud, and SaaS environments. The role supports ISO/IEC 27001 ISMS and SOC 2 Type II with auditable evidence in a mostly remote US/Canada setting.

You will administer the GRC platform (Vanta), manage access controls, monitor alerts with MDR/SOC partners, and contribute to incident response and security tool deployments, driving remediation and continuous improvement.

Qualifications

• Experience supporting operational cybersecurity or compliance initiatives.
• Knowledge of ISO 27001 and SOC 2 criteria.
• Experience collecting and validating audit-ready evidence.
• Experience with GRC platforms (e.g., Vanta).
• Experience working in regulated environments.

Responsibilities

• Operate day-to-day information security controls across corporate, cloud, and SaaS environments.
• Support ISO/IEC 27001 ISMS by monitoring controls, maintaining evidence, addressing gaps, and updating risk register.
• Support SOC 2 Type II compliance with security and availability controls and auditable evidence.
• Administer and maintain GRC platform (Vanta) to support control tracking, evidence collection, remediation management, and audits.
• Enforce access control processes, including onboarding/offboarding and recertification.
• Monitor security alerts and incidents in coordination with MDR and SOC providers.
• Support incident response activities including investigation, remediation, and post‑incident review.
• Validate logging, monitoring, vulnerability management, backups, and configuration compliance.
• Support security tool deployments and policy projects.
• Enforce secure system usage and data handling; escalate non-compliance.
• Support third‑party security and vendor risk management activities (ISO 27001, SOC 2).
• Identify gaps between documented controls and practice; drive remediation.
• Provide guidance to users on secure system usage and data handling.
• Support KnowBe4 phishing resistance program including training campaigns and post‑email analysis.

Skills

ISO 27001

SOC 2 controls

Identity management

Endpoint security

Logging & monitoring

Vulnerability management

Audit evidence

Education

Post-secondary education in Cybersecurity/IT/CS

Tools

Vanta

KnowBe4

Job description

Build your career with Kraken Robotics. Make a difference to others. If innovation drives you, and you want a career that makes a difference to the world, helping humanity overcome the challenges in our oceans – safely, efficiently, and sustainably – then come join us at Kraken Robotics.

Kraken Robotics is currently recruiting for a Cybersecurity Specialist.

This position can be remote anywhere in Canada or US, with preference given to those candidates within the cities we have offices.

ROLES AND RESPONSIBILITES

• Operate and enforce Kraken’s day‑to‑day information security controls across corporate, cloud, and SaaS environments.
• Support Kraken’s ISO/IEC 27001 Information Security Management System (ISMS) by monitoring control operation, maintaining evidence, addressing control gaps, and updating risk register.
• Support SOC 2 Type II compliance by ensuring security and availability controls operate effectively and are supported by accurate, auditable evidence.
• Administer and maintain Kraken’s GRC platform (Vanta) to support control tracking, evidence collection, remediation management, and audit activities.
• Enforce access control processes, including user onboarding and offboarding, privileged access reviews, and periodic access recertification.
• Monitor and respond to security alerts and incidents in coordination with managed detection and response (MDR) and SOC providers.
• Support incident response activities, including investigation, documentation, corrective actions, and post‑incident review.
• Validate operational security controls such as logging, monitoring, vulnerability management, backup verification, and configuration compliance.
• Support cybersecurity infrastructure and policy projects, including the implementation and rollout of new security tools, platforms, and control capabilities.
• Enforce secure system usage and data handling requirements, escalating non‑compliance and control failures as appropriate.
• Support third‑party security and vendor risk management activities, including review of ISO 27001 certifications, SOC 2 reports, and related assurance artifacts.
• Identify gaps between documented controls and operational practice and work with internal teams to drive remediation and continuous improvement.
• Provide guidance to users on secure system usage and data handling requirements in line with company policy.
• Support the delivery of the organization’s security awareness and phishing resistance program using KnowBe4, including administration of training campaigns, simulated phishing exercises, and post‑email analysis workflows, and contributing to user remediation and reporting activities.

QUALIFICATIONS AND EXPERIENCE

• Post‑secondary education in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Experience supporting operational cybersecurity, information security programs, or compliance initiatives.
• Working knowledge of ISO/IEC 27001, SOC 2 Trust Services Criteria, and common operational security controls.
• Experience collecting, maintaining, and validating audit‑ready security evidence.
• Experience working with GRC platforms (e.g., Vanta or similar) is strongly preferred.
• Technical security knowledge across areas such as identity and access management, endpoint security, logging and monitoring, vulnerability management, and secure system configuration.
• Experience operating in regulated, customer‑assessed, or compliance‑driven environments is an asset.

PREFERRED SKILLS

• Strong written and verbal communication skills, with the ability to explain security requirements clearly to technical and non‑technical audiences.
• High attention to detail and a disciplined, evidence‑driven approach to security operations.
• Ability to translate security requirements into practical, enforceable operational controls.
• Strong organizational and time‑management skills in a multi‑priority environment.
• Self‑motivated with a proactive mindset and a commitment to continuous improvement.
• Relevant certifications (e.g., Security+, SSCP, CISSP, ISO 27001 Lead Implementer/Auditor) are considered assets.