Security Engineer
Information Security & Access Management Specialist
We’re looking for an Information Security & Access Management Specialist to join KITRUM’s internal team. KITRUM is a remote-first software development company certified to ISO/IEC 27001:2022, building products for clients in fintech, healthcare, e-commerce, and other regulated industries.
As an Information Security & Access Management Specialist, you will manage day-to-day access across KITRUM’s systems and help maintain our Information Security Management System (ISMS), ensuring it operates effectively and remains audit-ready.
You’ll start with hands-on user and access administration and recurring security tasks. Over time, with guidance from our Head of Continuous Improvement (CI), you’ll gradually take ownership of ISMS documentation, audit support, and security awareness initiatives.
This position is ideal for someone with a system administration or IT support background who wants to develop a career in information security. You bring the access management skills, and we’ll help you learn ISO 27001.
Must-have for the position
- 6+ months of experience in system administration, IT support, or helpdesk, including hands-on access management across multiple systems;
- Practical experience creating and removing user accounts, managing roles and groups, and configuring permissions;
- Experience administering SaaS or cloud-based tools, particularly Google Workspace;
- Basic understanding of information security principles, including least privilege, strong authentication, MFA, phishing, and data protection;
- Confidence working with large datasets in Google Sheets, including filters, sorting, formulas, inventory management, data comparison, and reporting;
- Accuracy, attention to detail, and discipline in following procedures and maintaining records;
- Clear communication skills and ability to coordinate and follow up with colleagues across teams;
- Genuine interest in developing a career in information security;
- Upper-Intermediate English (B2) or higher.
Will be a strong plus
- Familiarity with ISO 27001, including knowledge gained through coursework;
- Entry-level security certifications or training, such as CompTIA Security+, ISC2 Certified in Cybersecurity, or ISO 27001 Foundation;
- Experience with Zoho Directory, Zoho Vault, Zoho People, ClickUp, or password managers;
- Experience preparing training materials or security awareness content.
Responsibilities
- Manage user access across KITRUM systems during onboarding, role changes, and offboarding, maintaining accurate records of all changes;
- Maintain user roles and permissions according to the company’s access matrix and participate in periodic access reviews;
- Configure tools, access permissions, and workspaces for new client projects;
- Perform and document recurring security activities, including manual backups and inventories of equipment, subscriptions, access, and data;
- Support regular risk register reviews and verify that new equipment and subscriptions comply with internal processes and ISO requirements;
- Prepare security awareness materials covering security best practices, phishing, emerging threats, and updates to internal policies;
- Coordinate security training and mandatory form campaigns, monitor completion, and follow up with employees;
- Maintain ISMS policies, documentation, and records in collaboration with process owners and team leaders;
- Collect and organize evidence for internal and certification ISO 27001 audits and support colleagues in preparing for audit interviews;
- Implement ISMS improvement tasks based on risk assessments and audit findings;
- Complete information security questionnaires for clients and vendors, subject to review by the Head of CI.
What you’ll learn with us
- ISO/IEC 27001:2022: How a certified Information Security Management System operates, including the Statement of Applicability, risk management, internal audits, and handling nonconformities;
- ISO 27001 training: If you haven’t completed an ISO 27001 course, KITRUM will provide one to be completed within your first two months;
- Internal security processes: KITRUM’s security policies, access matrix, and project setup standards;
- Audit preparation: How a certified company prepares for and successfully completes external audits.
About the team
You’ll join KITRUM’s Operations team, reporting directly to the Head of Continuous Improvement (CI).
You’ll work closely with our System Administrator and Technical Expert, as well as HR, project managers, and team leaders across the company.
KITRUM has approximately 150 employees and operates as a fully remote company.
Interview process
- HR Interview (30 minutes): Initial conversation with a recruiter to discuss your background, experience, and interest in the position.
- Test Task (60–90 minutes): Practical assignment to assess your relevant skills.
- Interview with the Head of CI (45–60 minutes): Discussion of your experience and suitability for the role.
Why you’ll love working here
- Competitive Pay: We offer a compensation that reflects your skills and experience;
- Remote Flexibility: Work from anywhere — our team is distributed across the globe;
- Professional Growth: Access to continuous learning opportunities, including paid courses, certifications, mentorship;
- Work-Life Balance: 30 days of paid vacation and 6 paid sick days per year, plus flexible hours;
- Inclusive Culture: We embrace diversity and foster a culture of trust, transparency, and mutual respect;
- Cool Perks: Join our virtual team events, get a budget for your home office setup, and enjoy access to exclusive content and tools.
📲 If this vacancy isn’t for you but could be perfect for a friend/colleague, share it through this link and earn a reward for your referral!
Відгукнутись на вакансію