Security Leadership: SOC 2 & ISO 27001 (Hybrid, Boston)

LineVision, Inc.; Boston (MA); Hybrid; USD 125,000 - 140,000; Full time

Job summary

LineVision, Inc. in Boston is seeking a Security Leader to own and advance our security program.

You will lead SOC 2 Type II and ISO 27001 programs, manage risk assessments, and govern security operations across cloud and product environments. Reporting to the VP of Security, IT & Quality, you will supervise a Security Analyst, drive incident response, vendor risk, and customer security engagements, and partner with Platform, Hardware, and IT teams to protect confidential data while enabling

Qualifications

• 6+ years in information security, with at least 2 years in a lead or people-management role.
• Direct ownership (not only support) of SOC 2 Type II and ISO 27001 audits.
• Experience conducting risk assessments with NIST CSF or an equivalent framework.
• Hands-on experience with penetration test management, vulnerability management, and EDR/SIEM tooling (CrowdStrike preferred).
• Experience with AWS cloud security.
• Experience responding to enterprise customer security questionnaires and contract requirements.
• CISSP, or a commitment to earn it within 18 months of start date.

Responsibilities

• Own the annual audit cycle for SOC 2 Type II and ISO 27001 using the Vanta compliance platform, including all controls, internal audits, external audits, and nonconformity tracking to closure.
• Lead the annual NIST CSF risk assessment, monthly Platform and Hardware risk reviews, and quarterly Governance, Risk & Compliance reviews. Maintain policies and report ISMS efficacy metrics to leadership.
• Conduct AWS cloud and Sensor penetration tests, ISA/IEC 62443 product security assessments, vendor and product risk assessments.
• Oversee vulnerability management, CrowdStrike Falcon Complete detection rules, NextGen SIEM data feeds, and the MSSP relationship. Monitor open-source license compliance with FOSSA.
• Own the incident response program and plan, including the annual 3rd part tabletop, business continuity and disaster recovery exercises, and implementation of lessons learned.
• Define and guide data management controls, ensuring rigorous application of policies and customer contractual obligations regarding confidential data. Partner with Platform, Hardware and IT to apply controls across all company systems and applications.
• Lead responses to customer security questionnaires, contract security reviews, and customer-facing security presentations and material.
• Identify risks and define security standards for enterprise and product AI. Inform the AI governance program with risk assessments and recommendations.
• Coach and develop the security team.

Skills

Security leadership

SOC 2 Type II

ISO 27001

Risk management

Threat modeling

AWS security

Penetration testing

Vanta

SIEM

Incident response

Education

CISSP

Tools

CrowdStrike

SIEM

FOSSA

Vanta

AWS

Job description

LineVision, Inc. in Boston is seeking a Security Leader to own and advance our security program.

You will lead SOC 2 Type II and ISO 27001 programs, manage risk assessments, and govern security operations across cloud and product environments. Reporting to the VP of Security, IT & Quality, you will supervise a Security Analyst, drive incident response, vendor risk, and customer security engagements, and partner with Platform, Hardware, and IT teams to protect confidential data while enabling