Security Ops & GRC Lead (ISO 27001/42001) - Remote

OpenKrill; United States; Remote; USD 200.000 - 225.000; Vollzeit

Benefits dieser Stelle

Unlimited PTO

Health plan (Medical, Dental, Vision)

401(k) match

Wellness reimbursement

Gym access

Zusammenfassung

OpenKrill seeks an Information Security Lead to make security a practical operating discipline across the org. You will own risk, incident readiness, and GRC, while maintaining ISO standards and guiding security improvements with engineering teams.

The role blends hands-on security operations, code review, and governance. You will report to IT Systems Manager, partner with platform and AI teams, and influence executive security decisions.

Qualifikationen

• 7+ years information security experience incl. ISO 27001 operations.
• Active CISSP certification, or eligibility and commitment to obtain within six months.
• ISO 42001 and CGRC experience preferred.
• Ability to read/write Python and JavaScript/TypeScript code to identify attack paths.

Aufgaben

• Operate ISO 27001 and ISO 42001 management systems with evidence collection, risk mgmt, control testing, audits, and surveillance prep.
• Build and run security operations across logging, detection, incident response, investigations, and post-incident improvements.
• Own the information security operating model including policies, risk acceptance, vulnerability governance, leadership reporting, and roadmaps.
• Lead identity, access, vendor, and data-protection controls with quarterly reviews and third-party assessments.
• Provide independent assurance by reviewing architecture, IaC, IAM policies, CI/CD workflows, and remediation with engineers.
• Establish security controls for AI systems, inventories, impact assessments, access controls, prompt-injection/data-exfiltration risks, audit trails, and shutdown mechanisms.

Kenntnisse

ISO 27001

CISSP

Incident response

Code review

IAM & cloud security

GRC & governance

Python/JS/TS

Tools

Pulumi

Terraform

Jobbeschreibung

OpenKrill seeks an Information Security Lead to make security a practical operating discipline across the org. You will own risk, incident readiness, and GRC, while maintaining ISO standards and guiding security improvements with engineering teams.

The role blends hands-on security operations, code review, and governance. You will report to IT Systems Manager, partner with platform and AI teams, and influence executive security decisions.