Security Engineer

We are looking for a Junior Security Compliance Specialist to support the implementation and maintenance of information security and compliance programs for our clients. You will work with technical teams and management to prepare organizations for ISO 27001 certification and SOC 2 examinations.

Responsibilities:

• Support the implementation and continual improvement of ISO 27001 ISMS and SOC 2 compliance programs.
• Conduct gap assessments and support risk assessments and remediation planning.
• Develop and maintain security policies, procedures, and compliance documentation.
• Help translate framework requirements into practical technical and organizational controls.
• Coordinate evidence collection and track compliance gaps and remediation activities.
• Conduct / support internal and external audits and compliance assessments.

Requirements:

• At least 6–9 months of hands-on experience with the implementation or maintenance of an ISO 27001 ISMS or a SOC 2 compliance program.
• Practical understanding of at least one framework: ISO 27001 or SOC 2, including its requirements, controls, and compliance processes.
• Understanding of information security risk management and compliance documentation.
• Familiarity with security controls, including IAM, encryption, logging, endpoint security, and vulnerability management.
• General understanding of cloud environments (AWS, Azure, or GCP) and the software development lifecycle (SDLC).
• Experience using AI tools to support compliance activities, documentation, gap assessments, or evidence analysis.
• Strong analytical, documentation, and communication skills.
• English: Intermediate or higher.

Nice to Have:

• Familiarity with GRC platforms such as Drata or Vanta.
• Understanding of both ISO 27001 and SOC 2.
• Knowledge of ISO 19011 and experience participating in internal audits.

Our Benefits:

• Professional growth: Individual development plan, mentorship, reimbursement for professional certifications and English lessons, access to professional courses in Corporate Learning Management System.
• Community: Tech community and knowledge-sharing events, English speaking club, corporate library and book club, volunteering and charity initiatives.
• Wellbeing: Medical insurance, regular medical check-ups, sport reimbursement, paid vacation and sick leave, mental health support, and events.
• Work environment: Fully-equipped offices, top-notch equipment, flexible work format, activities both in-office and online, Y-bucks, and access to the Yalantis store.

Please note that feedback on the results of the CV review will be provided only in the event of a decision to consider your candidacy further.
Otherwise, your data will be retained in the company’s CV database, and we will gladly contact you if a suitable vacancy becomes available. The consideration period is 7 working days.

Before sending us your CV, you may read our Privacy Notice.

Відгукнутись на вакансію