Remote Senior InfoSec & GRC Specialist

Halcyon; San Francisco (CA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Healthcare

Disability coverage

FSA

401k

Flexible PTO

Parental leave

Equity

Job summary

Halcyon is seeking a seasoned Senior Information Security Specialist to advance our GRC program and strengthen enterprise security posture. You will coordinate across teams, manage third-party risk, and support compliance initiatives in a fast-paced, remote-native environment.

You will develop security policies, monitor controls, and assist with incident response planning, disaster recovery testing, and business continuity exercises across cloud and hybrid environments.

Qualifications

• 5+ years of experience in information security, GRC, or IT risk management.
• Strong understanding of cybersecurity concepts, controls, and risk frameworks.
• Experience with third-party risk management processes and tooling.
• Coordinate security testing and vulnerability management efforts.
• Excellent communication, documentation, and cross-functional collaboration skills.
• Ability to assess and implement technical and administrative controls across cloud and hybrid environments.
• Experience with regulatory compliance and audit support in fast-paced environments.
• Hands-on participation in incident response or disaster recovery exercises is a plus.

Responsibilities

• Perform third-party risk assessments and track remediation activities.
• Coordinate internal and external security testing, including vulnerability scans and penetration tests.
• Develop corrective action plans for identified security gaps or audit findings.
• Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations.
• Partner with engineering and operations teams to ensure implementation of security and compliance requirements across the organization.
• Assist in developing, maintaining, and communicating information security policies, standards, and procedures.
• Coordinate security incident response planning, disaster recovery testing, and business continuity exercises.
• Monitor and support enforcement of technical and administrative security controls across the enterprise.
• Stay current with evolving security and privacy regulations and frameworks (e.g., SOC 2, ISO 27001, TX-RAMP, FedRAMP).

Skills

Information security

GRC

IT risk management

Third-party risk

Security testing

Incident response

Job description

Halcyon is seeking a seasoned Senior Information Security Specialist to advance our GRC program and strengthen enterprise security posture. You will coordinate across teams, manage third-party risk, and support compliance initiatives in a fast-paced, remote-native environment.

You will develop security policies, monitor controls, and assist with incident response planning, disaster recovery testing, and business continuity exercises across cloud and hybrid environments.