Senior Information Security Specialist

The Role

Location:

Information Security (InfoSec) Specialist

You’ll collaborate across Legal, IT, Product, and Engineering teams to strengthen our security framework and uphold data protection standards—contributing directly to our global impact.

Key Responsibilities

Security Operations

• Conduct security assessments and audits of SaaS applications.
• Configure and monitor access controls for corporate tools.
• Analyze logs and tools for suspicious activities.
• Maintain incident response plans and lead response activities.
• Stay current on emerging threats and industry best practices.

Compliance & Risk Management

• Work with our Legal and Compliance Team to ensure GDPR, CCPA, and other data protection compliance.
• Assess third-party vendor security posture.
• Conduct risk assessments and vulnerability identification.
• Support compliance audits with our Legal and Compliance team.
• Implement data encryption and access controls.

Collaboration & Communication

• Work with development teams on application security visibility.
• Deliver security training and awareness programs.
• Report security status to senior management.
• Respond to internal and external security inquiries.
• Document IT security standards and configurations.

Core Security Monitoring

• Own security monitoring, alerting, and log review for key SaaS tools (e.g., Okta, Google Workspace, Checkpoint).
• Identify monitoring gaps and improve log visibility.
• Collaborate with IT on response workflows and alert optimization.
• Analyze log trends to strengthen corporate security posture.

Minimum Requirements

• 3+ years of experience in information security, with a focus on SaaS environments.
• Solid hands-on experience with security assessments, SaaS audits, and access control configuration.
• Proficient in log monitoring, incident analysis, and vulnerability remediation across cloud-based systems.
• Familiar with vendor risk management practices and supporting compliance efforts.
• Skilled in implementing and managing security monitoring tools in production environments.
• Practical experience with Google Workspace (Enterprise) in a professional setting.
• Exposure to Okta; hands-on experience is a plus.
• Strong attention to detail with clear, effective communication across technical and non-technical teams.
• Demonstrated ability to communicate clearly and effectively in asynchronous environments, effectively using written updates and documentation to collaborate across time zones with distributed teams.
• Able to work independently, exercising sound judgment in a fast-paced environment.
• Comfortable adapting to shifting priorities in high-output settings.
• Collaborative and dependable team contributor with a pragmatic, problem-solving mindset.

Preferred Qualifications

• Experience with tools such as Notion and Asana.
• Technical familiarity with AWS, Heroku, Ruby on Rails, Redis, Postgres, and GitHub.
• Proficiency with analytics platforms like Snowflake and Looker.
• Background in privacy law and compliance audits.
• Experience working in a remote environment.

You'll also need

• A reliable home internet connection (or be able to get one).
• Fluent English language skills.