Remote InfoSec Engineer — Compliance & Cloud Security

The Phoenix Group; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive health benefits

Flexible PTO

Professional development stipend

Remote work options

Job summary

The Phoenix Group is seeking an Information Security Engineer to guide clients through complex security programs and manage compliance frameworks such as SOC 2 and ISO 27001. You will implement security controls in cloud, endpoint, and identity environments as the technical authority for cybersecurity operations.

Key duties include overseeing audits, developing security policies, and driving vulnerability management, incident response, and risk assessments across SaaS and IaaS platforms.

Qualifications

• 3–5+ years in information security, cybersecurity, or IT with a focus on security operations and compliance
• Experience leading full security audits using Vanta, Drata, or Secureframe platforms
• Hands-on administration of EDR and MDM tools
• Strong IAM knowledge (Okta, Entra ID) and cloud security practices for Google Workspace, Microsoft 365, and public clouds
• Experience managing vulnerability programs, incident response, and remediation efforts
• Thorough understanding of SOC 2, ISO 27001, NIST CSF frameworks, and security policy development

Responsibilities

• Lead clients through SOC 2, ISO 27001, and NIST CSF audits, including readiness assessments, remediation, and evidence collection
• Develop and maintain security policies aligned with standards (NIST, GDPR, CCPA, SEC)
• Oversee internal compliance programs using automated tools (Vanta, etc.) and execute compliance roadmaps
• Evaluate vendors and AI tools for security risks and optimize TPRM procedures
• Deploy and manage EDR and MDM across Mac and Windows devices
• Strengthen IAM using Okta, Entra ID, MFA, and password managers
• Harden security posture of cloud platforms (G Workspace, M365, clouds)
• Monitor, triage, and respond to security alerts; lead incident response
• Manage vulnerability scans, pen tests, and SIEM administration
• Conduct security awareness training and phishing simulations
• Scope and lead security projects and document SOPs/Playbooks

Skills

Security operations

Audits & compliance

IAM & SSO

Risk assessment

Education

Bachelor's degree in Information Security or related field

Tools

SentinelOne

CrowdStrike

Jamf

Mosyle

Intune

Job description

The Phoenix Group is seeking an Information Security Engineer to guide clients through complex security programs and manage compliance frameworks such as SOC 2 and ISO 27001. You will implement security controls in cloud, endpoint, and identity environments as the technical authority for cybersecurity operations.

Key duties include overseeing audits, developing security policies, and driving vulnerability management, incident response, and risk assessments across SaaS and IaaS platforms.