Senior InfoSec Engineer: Lead Compliance & Cloud Security

Ninth Wave, Inc.; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Ninth Wave, Inc. is looking for a Senior Information Security Engineer to lead a world-class information security program.

You will establish, maintain, and mature policies, procedures, and systems to manage risks for Ninth Wave and its clients, focusing on SOC 2 Type 2 and PCI-DSS compliance while leveraging NIST, CIS, and ISO27001 standards. You will act as the point of contact for client security calls, drive security governance across cloud infrastructure (AWS, Azure), and mentor security

Qualifications

• 10 years of experience managing or leading information security functions.

Responsibilities

• Maintain policies, processes, and procedures to protect the confidentiality, integrity, and availability of Ninth Wave’s data and services.
• Mature the information security program to continually discover, reassess, and mitigate security risks as the business, product, and customer landscape changes.
• Ownership over cloud infrastructure security, security operations, application security, and GRC.
• Maintain compliance with industry control standards including SOC Type 2 and PCI-DSS.
• Partner with the product management, software development, infrastructure, and operations to ensure that Ninth Wave achieves confidentiality, integrity, and availability outcomes for its products and services.

Skills

Security governance

Incident response

Security operations

Cloud security

Mentoring/leadership

Communication skills

Education

Bachelor’s degree in Computer Science or MIS

Tools

SOC 2 Type 2

PCI-DSS

NIST CSF

ISO 27001

Job description

Ninth Wave, Inc. is looking for a Senior Information Security Engineer to lead a world-class information security program.

You will establish, maintain, and mature policies, procedures, and systems to manage risks for Ninth Wave and its clients, focusing on SOC 2 Type 2 and PCI-DSS compliance while leveraging NIST, CIS, and ISO27001 standards. You will act as the point of contact for client security calls, drive security governance across cloud infrastructure (AWS, Azure), and mentor security