ISO 27001 Security Engineer - Remote in Turkey

Logoslabs; San Francisco (CA); À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Monthly meal allowance

Private health insurance

Access to learning platforms (Spotify,

ESOP program

Referral bonuses

Social impact volunteering

Global team events

Tech & Dev Talks

Fully remote in Turkey

Résumé du poste

Insider One seeks a security governance lead to drive ISO 27001 ISMS, SOC 2 Type II readiness, and enterprise-wide risk management. You will oversee AWS security posture, vendor risk, and data protection programs while guiding secure architecture and incident response.

This role emphasizes collaboration with engineering, DevOps, and business units to reduce risk and promote compliance. You will design awareness initiatives, manage audits, and contribute to AI/LLM governance.

Qualifications

• Strong knowledge of ISO 27001, ISMS, and audit frameworks.
• Experience with risk management and privacy regulations (GDPR / KVKK).
• Hands-on AWS security, IAM, logging, and baseline hardening.
• Familiarity with SOC 2 Type II control domains and vendor risk.
• Excellent documentation and audit reporting skills.

Responsabilités

• Lead ISO 27001 ISMS implementation, maintenance, and audit readiness.
• Support SOC 2 Type II compliance activities and evidence collection.
• Conduct internal audits, manage findings, and remediation tracking.
• Own company-wide risk management program including risk scoring.
• Govern AWS security posture, access controls, and baselines.
• Collaborate with Red/Blue teams on security findings.
• Maintain security policies, standards, and procedures.
• Design security awareness programs for multiple roles.
• Lead third-party security assessments and ongoing monitoring.
• Coordinate security incident handling and post-incident reviews.
• Drive data protection governance (GDPR, KVKK) and DPIA processes.
• Oversee AI/LLM governance, including risk assessments.
• Advise business units on secure architecture and risk-based decisions.
• Contribute to threat modeling and secure design guidance.
• Coordinate BCP/DR testing and improvement efforts.

Connaissances

ISO 27001

ISMS processes

Audit management

AWS security

SOC 2 Type II

Privacy regulations

Security governance

Vendor risk

English proficiency

Outils

Jira

Description du poste

Insider One seeks a security governance lead to drive ISO 27001 ISMS, SOC 2 Type II readiness, and enterprise-wide risk management. You will oversee AWS security posture, vendor risk, and data protection programs while guiding secure architecture and incident response.

This role emphasizes collaboration with engineering, DevOps, and business units to reduce risk and promote compliance. You will design awareness initiatives, manage audits, and contribute to AI/LLM governance.