Senior InfoSec & GRC Specialist (Remote)

Halcyon; Oregon; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Healthcare coverage

Disability insurance

FSA options

401k plan

Flexible PTO

Parental leave

Equity options

Job summary

Halcyon is seeking a seasoned Senior Information Security Specialist to support our GRC program and strengthen our enterprise-wide security posture. You will coordinate third-party risk, document controls, and drive improvements across governance, risk, and compliance initiatives.

The role collaborates with engineering and operations to implement security requirements, develop policies, and prepare for incidents and recovery exercises.

Qualifications

• 5+ years of experience in information security, GRC, or IT risk management.
• Strong understanding of cybersecurity concepts, controls, and risk frameworks.
• Experience with third-party risk management processes and tooling.
• Proven ability to coordinate security testing and vulnerability management efforts.
• Excellent communication, documentation, and cross-functional collaboration skills.
• Ability to assess and implement technical and administrative controls across cloud and hybrid environments.
• Experience with regulatory compliance and audit support in fast-paced environments.
• Hands-on participation in incident response or disaster recovery exercises is a plus.

Responsibilities

• Perform third-party risk assessments and track remediation activities.
• Coordinate internal and external security testing, including vulnerability scans and penetration tests.
• Develop, track, and follow up on corrective action plans for identified security gaps or audit findings.
• Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations.
• Partner with engineering and operations teams to ensure implementation of security and compliance requirements across the organization.
• Assist in developing, maintaining, and communicating information security policies, standards, and procedures.
• Coordinate security incident response planning, disaster recovery testing, and business continuity exercises.
• Monitor and support enforcement of technical and administrative security controls across the enterprise.
• Stay current with evolving security and privacy regulations and frameworks (e.g., SOC 2, ISO 27001, TX-RAMP, FedRAMP).

Skills

Information security

GRC

Vendor risk mgmt

Security testing

Communication

Risk assessment

Incident response

Tools

Drata

Vanta

ISO 27001

NIST 800-53

Job description

Halcyon is seeking a seasoned Senior Information Security Specialist to support our GRC program and strengthen our enterprise-wide security posture. You will coordinate third-party risk, document controls, and drive improvements across governance, risk, and compliance initiatives.

The role collaborates with engineering and operations to implement security requirements, develop policies, and prepare for incidents and recovery exercises.