Remote Cybersecurity Specialist - ISMS, SOC 2 & GRC

Kraken Robotics; Houston (TX); Remote; USD 85,000 - 125,000; Full time

Job summary

Kraken Robotics is seeking a Cybersecurity Specialist to safeguard information systems across corporate, cloud, and SaaS environments. You will implement and monitor security controls, evidence, and compliance activities in support of ISO 27001, SOC 2, and vendor risk management.

You will administer the GRC platform (Vanta), manage access controls, respond to security incidents, and drive continuous improvement across security programs. Remote work options are available in the US and Canada.

Qualifications

• Post-secondary education or equivalent practical experience in cybersecurity, IT, CS.
• Experience supporting operational cybersecurity, information security programs, or compliance initiatives.
• Knowledge of ISO/IEC 27001 and SOC 2 Trust Services Criteria; experience with control evidence.

Responsibilities

• Operate and enforce day-to-day information security controls across corporate, cloud, and SaaS environments.
• Support ISO 27001 ISMS by monitoring controls, maintaining evidence, addressing gaps, and updating risk register.
• Support SOC 2 Type II by ensuring security controls operate effectively with auditable evidence.
• Administer GRC platform (Vanta) to support control tracking, evidence collection, remediation, and audits.
• Enforce access control processes including onboarding/offboarding and privileged access reviews.
• Monitor security alerts and incidents with MDR/SOC providers; coordinate response.
• Support incident response activities: investigation, remediation, and post-incident review.
• Validate security controls: logging, monitoring, vulnerability management, backups, configuration compliance.
• Support security tool deployments and policy projects; roll out new tools and controls.
• Enforce secure system usage and data handling; escalate non-compliance as needed.
• Support third-party security and vendor risk reviews (ISO 27001, SOC 2) and artifacts.
• Identify gaps between documented controls and practice; drive remediation with internal teams.
• Provide guidance on secure usage and data handling per policy.
• Assist in delivering security awareness and phishing resistance programs using KnowBe4.

Skills

ISO 27001 knowledge

SOC 2 knowledge

GRC platforms (Vanta)

Identity and access management

Endpoint security

Logging and monitoring

Vulnerability management

Audit evidence collection

Security certifications assets

Education

Post-secondary education in Cybersecurity/IT/CS

Tools

Vanta

KnowBe4

Job description

Kraken Robotics is seeking a Cybersecurity Specialist to safeguard information systems across corporate, cloud, and SaaS environments. You will implement and monitor security controls, evidence, and compliance activities in support of ISO 27001, SOC 2, and vendor risk management.

You will administer the GRC platform (Vanta), manage access controls, respond to security incidents, and drive continuous improvement across security programs. Remote work options are available in the US and Canada.