Remote Cybersecurity Specialist | ISO/SOC 2 & GRC

Kraken Robotics Inc; Longmont (CO); Remote; USD 90,000 - 130,000; Full time

Job summary

Kraken Robotics is seeking a Cybersecurity Specialist to enforce security controls across corporate, cloud, and SaaS environments. The role supports ISO/IEC 27001 ISMS and SOC 2 Type II with auditable evidence in a mostly remote US/Canada setting.

You will administer the GRC platform (Vanta), manage access controls, monitor alerts with MDR/SOC partners, and contribute to incident response and security tool deployments, driving remediation and continuous improvement.

Qualifications

• Experience supporting operational cybersecurity or compliance initiatives.
• Knowledge of ISO 27001 and SOC 2 criteria.
• Experience collecting and validating audit-ready evidence.
• Experience with GRC platforms (e.g., Vanta).
• Experience working in regulated environments.

Responsibilities

• Operate day-to-day information security controls across corporate, cloud, and SaaS environments.
• Support ISO/IEC 27001 ISMS by monitoring controls, maintaining evidence, addressing gaps, and updating risk register.
• Support SOC 2 Type II compliance with security and availability controls and auditable evidence.
• Administer and maintain GRC platform (Vanta) to support control tracking, evidence collection, remediation management, and audits.
• Enforce access control processes, including onboarding/offboarding and recertification.
• Monitor security alerts and incidents in coordination with MDR and SOC providers.
• Support incident response activities including investigation, remediation, and post‑incident review.
• Validate logging, monitoring, vulnerability management, backups, and configuration compliance.
• Support security tool deployments and policy projects.
• Enforce secure system usage and data handling; escalate non-compliance.
• Support third‑party security and vendor risk management activities (ISO 27001, SOC 2).
• Identify gaps between documented controls and practice; drive remediation.
• Provide guidance to users on secure system usage and data handling.
• Support KnowBe4 phishing resistance program including training campaigns and post‑email analysis.

Skills

ISO 27001

SOC 2 controls

Identity management

Endpoint security

Logging & monitoring

Vulnerability management

Audit evidence

Education

Post-secondary education in Cybersecurity/IT/CS

Tools

Vanta

KnowBe4

Job description

Kraken Robotics is seeking a Cybersecurity Specialist to enforce security controls across corporate, cloud, and SaaS environments. The role supports ISO/IEC 27001 ISMS and SOC 2 Type II with auditable evidence in a mostly remote US/Canada setting.

You will administer the GRC platform (Vanta), manage access controls, monitor alerts with MDR/SOC partners, and contribute to incident response and security tool deployments, driving remediation and continuous improvement.