Remote Information Security & GRC Engineer

Northern Data Group; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Northern Data seeks an Information Security Engineer to strengthen governance and operational security across the organization. You will maintain the ISMS, draft and publish policies, and coordinate audits with IT, Legal, and Compliance.

Role involves risk assessments, metrics development, and overseeing security projects while supporting DLP, data classification, and incident response. Remote-friendly, global collaboration, and evolving security program.

Qualifications

• Bachelor's degree in information security, Cyber Security, Computer Science or related discipline.
• 5-7 years' experience in Information Security, GRC, Security Operations.
• Familiarity with ISMS and ISO/IEC 27001.
• Experience with risk management methodologies and information security risk assessments.
• Familiarity with security compliance frameworks and regulatory requirements (e.g. NIS2, SOC 2, CIS Controls, GDPR).
• Experience managing documentation, registers and workflows across enterprise platforms (SharePoint, Confluence, Jira).
• Experience with Data Loss Prevention (DLP), information protection, and data classification solutions.
• Experience with data analysis, reporting, dashboard development and KPI measurement.
• Experience working in cross-functional environments with Infrastructure, IT, Platform Engineering, Compliance and Legal teams.
• Familiarity with Vulnerability management processes and security testing tools; SIEM and EDR concepts.

Responsibilities

• Governance: maintain ISO/IEC 27001 ISMS; policy lifecycle and publishing.
• Documentation: administer repositories and workflow platforms; version control and reviews.
• Registers: maintain Asset, Risk, Exception, and Action trackers; data quality.
• Risk: support risk assessments, treatment plans, and reviews.
• Metrics: prepare security metrics, dashboards, and management reports.
• Projects: coordinate security projects with stakeholders; track scope and milestones.
• Audits: lead audit prep, evidence collection, and remediation tracking.
• Security programs: support awareness, incident response, and reporting initiatives.

Skills

ISMS knowledge

GRC

Security operations

SIEM

EDR

Vulnerability management

Incident response

KPI reporting

Data loss prevention

Security governance

Policy documentation

Cross-functional collaboration

Education

Bachelor's degree in information security or related field

Tools

SharePoint

Confluence

Jira

DLP

Data classification

Job description

Northern Data seeks an Information Security Engineer to strengthen governance and operational security across the organization. You will maintain the ISMS, draft and publish policies, and coordinate audits with IT, Legal, and Compliance.

Role involves risk assessments, metrics development, and overseeing security projects while supporting DLP, data classification, and incident response. Remote-friendly, global collaboration, and evolving security program.