Senior Information Security & GRC Specialist

Halcyon; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Healthcare

Disability insurance

FSA options

401k plan

Flexible PTO

Parental leave

Equity

Job summary

Halcyon, a remote-native security company, is seeking a seasoned Senior Information Security Specialist to advance our GRC programs. You will coordinate across teams, manage third-party risk, and strengthen enterprise security posture through policy development and incident response readiness.

You will support compliance initiatives, monitor security controls, and help mature documentation across SOC 2, ISO 27001, and related frameworks, collaborating with engineering and operations to implement

Qualifications

• 5+ years of information security, GRC, or IT risk management.
• Strong understanding of cybersecurity concepts, controls, and risk frameworks.
• Demonstrated experience with third-party risk management processes and tooling.
• Proven ability to coordinate security testing and vulnerability management efforts.

Responsibilities

• Perform third-party risk assessments and track vendor remediation.
• Coordinate internal/external security testing, including vulnerability scans and pen tests.
• Develop and follow up on corrective action plans for security gaps or audit findings.
• Collaborate with MSPs and internal stakeholders to monitor security events and escalations.
• Partner with engineering/ops to implement security and compliance requirements.
• Develop, maintain, and communicate information security policies, standards, and procedures.
• Coordinate security incident response planning, disaster recovery testing, and business continuity exercises.
• Monitor and support enforcement of security controls enterprise-wide.
• Stay current with evolving security/privacy regulations and frameworks (SOC 2, ISO 27001, TX-RAMP, FedRAMP).

Skills

InfoSec concepts

GRC/IT risk

Third-party risk

Security testing coordination

Documentation & comms

Cloud & hybrid security

Incident response

Tools

Drata

Vanta

Job description

Halcyon, a remote-native security company, is seeking a seasoned Senior Information Security Specialist to advance our GRC programs. You will coordinate across teams, manage third-party risk, and strengthen enterprise security posture through policy development and incident response readiness.

You will support compliance initiatives, monitor security controls, and help mature documentation across SOC 2, ISO 27001, and related frameworks, collaborating with engineering and operations to implement