Infosec Engineer

Infosec Engineer

As an Information Security Engineer at IDfy, youll support the InfoSec team in ensuring that our systems, policies, and processes meet global compliance standards. From supporting audits to reviewing documentation and responding to customer requests, youll get hands-on experience in what it takes to keep a fast-paced tech company secure. This is the perfect role if youve dabbled in audits, are curious about security frameworks, and want to grow into a well-rounded InfoSec professional.

We are the match if you...

• Have been part of audits (ISO 27001, SOC 2, Customer TPRA) either conducting or surviving them for 2-4 years
• Have good understanding of ISO 27001, SOC 2, or other security frameworks
• Experienced in handling ISMS management end to end independently/ as a part of a team
• Are organized, detail-oriented, and a bit obsessed with checklists
• Know your way around cloud basics (GCP preferred, others fine too)
• Can document policies and processes clearly
• Want to learn how security works in a product and SaaS environment
• Are eager to work with a team that takes compliance seriously (but not too seriously)
• Are open to earning certifications down the line (CISA, ISO 27001 LA, etc.)

Heres what your day would look like...

• Assist in maintaining our ISMS for ISO 27001 and SOC 2 including policy review/updates, creating SOPs and executing ISMS activities
• Support internal and external audit prep and documentation
• Track and respond to client security questionnaires
• Face / assist customer third-party risk assessments
• Collaborate with legal, engineering, and product teams to ensure compliance
• Assist in monitoring compliance metrics and identifying improvement areas
• Learn, grow, and eventually take on more ownership within the InfoSec team