26 to 50 of 146 Remote/Hybrid SOC 2 Jobs

Information Security Analyst to safeguard our SaaS platform across security operations, access reviews and risk management. You will help operate ISO 27001 and SOC 2 controls while learning quickly and delivering practical security improvements across the business. Based in London with hybrid work, you will collaborate with Engineering ...

Information Security Management System.As an Information Security Analyst, you will help operate and improve the controls that support our ISO 27001 and SOC 2 programmes, while also getting involved in the real security work that happens across a growing SaaS business. You will not be expected to know … security a helpful, trusted partner in the way FundApps builds, buys and operates technology.Taking full, end-to-end ownership of FundApps’ ISO 27001 and SOC 2 controls operation, managing every stage from initial evidence collection and control checks through to remediation tracking and comprehensive audit preparation.Organising and chairing ...

Information Security Management System. As an Information Security Analyst, you will help operate and improve the controls that support our ISO 27001 and SOC 2 programmes, while also getting involved in the real security work that happens across a growing SaaS business. You will not be expected … helpful, trusted partner in the way FundApps builds, buys and operates technology. Taking full, end-to-end ownership of FundApps’ ISO 27001 and SOC 2 controls operation, managing every stage from initial evidence collection and control checks through to remediation tracking and comprehensive audit preparation. Organising and chairing ...

secure development adoption, vulnerability resolution, and developer engagement. Collaborate with Privacy, Legal, and Compliance teams to ensure alignment with regulatory requirements (ISO 27001, SOC 2, GDPR, and emerging AI regulations).Foster a strong team culture based on collaboration, learning, and continuous improvement. What you'll need10+ years … developer engagement. Experience leading offensive security programs (penetration testing, red teaming, bug bounty).Practical understanding of governance and assurance frameworks such as ISO 27001, SOC 2, and OWASP SAMM.Familiarity with AI/LLM tooling (e.g., Cursor, GitHub Copilot, custom LLM integrations) and the associated security and governance considerations. ...

architects, compliance teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations). Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data … with the EU AI Act as it applies to foundation models. Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA). A track record ...

These are broad, senior engineering roles, not single-language specialist posts. This is a regulated payments environment governed by frameworks including DORA, PCI DSS, SOC 2, EMI regulations and GDPR. These frameworks shape our SDLC itself, from change control and approvals to testing evidence and audit trails. Delivery … propose efficiency improvements that keep compliance intact. Familiarity with, or the ability to rapidly get to grips with, frameworks such as DORA, PCI DSS, SOC 2, EMI regulations and GDPR. You understand that the SDLC is constrained by these frameworks and can still deliver efficiently within it, using ...

.NET Core, TypeScript, React, Python, Go Datadog (SIEM), CloudFlare ZTNA, Falco, Wiz, Riot, HackerOne, TruffleHog Google Workspace, Jumpcloud, Vanta, Hibob, Slack GitHub, CircleCI, ArgoCD SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 42001 Who you are You have at least 8 years of experience ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

information security principles and cybersecurity frameworks relevant to cloud environments: MITRE ATT&CK for Cloud, CIS Benchmarks, AWS Well-Architected Security Pillar, NIST CSF, SOC 2, ISO 27001.Willingness and ability to participate in an on-call rotation, including after-hours response.Ability to produce clear, comprehensive, and well-structured ...

Permanent, full time (Hybrid 2-3 days in office) London, UK Who we are Iprova is a pioneering and fast-growing technology start-up with offices in Lausanne, Switzerland, and London, UK. We support some of the world’s best-known technology companies in North America, Europe, and Japan … Comfortable working in Unix/Linux environments Strong communication skills and ability to collaborate across cross-functional engineering teams Work from the Shoreditch office 2-3 days a week Nice to Have Experience with GitOps tools such as ArgoCD Familiarity with Dagger-based pipelines and workflow orchestration (e.g., Argo ...

policy-as-code (OPA/Gatekeeper), service mesh (Istio/Linkerd) and SSO/identity integration.Knowledge of regulatory frameworks and controls (e.g., ISO 27001, SOC 2, PCI DSS) and audit evidence collection.Experience running high-availability platforms and performing capacity planning and cost optimisation. ...

Cloud platforms: AWS, Azure, GCP. A background in financial services or similar regulated industries. Familiarity with compliance frameworks and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, SEC). A track record in consulting, solutions architecture, or technical coaching. Interest in technical sales ...

Cloud platforms: AWS, Azure, GCP. A background in financial services or similar regulated industries. Familiarity with compliance frameworks and security requirements (e.g., ISO 27001, SOC 2, SOX, PCI DSS, FedRAMP, FFIEC, NYDFS, SEC). A track record in consulting, solutions architecture, or technical coaching. Interest in technical sales ...

. Familiarity with Kubernetes (GKE RBAC + workload identity). Experience using Secret Manager, Vault, or other secrets management tools. Knowledge of compliance frameworks (SOC2, ISO 27001, PCI, HIPAA). Education Bachelor's degree in computer science, Engineering, Information Security, or equivalent hands-on experience. This is an umbrella contract ...

fully remote role open to candidates based in Europe, with regular availability required to support U.S. business hours and time zones.The opportunityLead and manage SOC 1 and SOC 2 examinations under AICPA standards in a complex, rapidly evolving technology environment, partnering with external auditors and internal teams ...

genuine passion for security. Here's what we need:Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS).Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience … Professional Cloud Security Engineer, or equivalent cloud security certification.Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect.Experience integrating ATT&CK Navigator into SOC workflows.Additional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes ...

genuine passion for security. Here's what we need: Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS).Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP, with 6+ years' hands-on experience … Security Engineer, or equivalent cloud security certification. Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect. Experience integrating ATT&CK Navigator into SOC workflows. Additional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that ...

Engineering to join our collaborative and inclusive team. Reporting to our Global Head of Platform Engineering, this is a hybrid-working role, typically requiring 2 days per week in the office. The role will also include leadership of our Forward Deployed Engineers, ensuring this team is closely aligned with … Azure AKS or Google GKE. Strong understanding of GitOps tooling such as Argo CD, Flux or equivalent deployment automation approaches. Experience with ISO 27001, SOC 2 or similar assurance frameworks, particularly where operational teams are required to provide evidence for access, change, incident, backup, resilience and monitoring controls. ...

cloud environments – evaluate cloud environments and provide recommendations for performance optimisation, security, cost reduction and resource efficiency. Ensure compliance with industry standards (GDPR, HIPAA, SOC2) and implement best practices for security, IAM, encryption and data protection. INNOVATE with data-driven solutions – create Proof of Concepts and Minimum Viable Products ...

raise and track issues with vendors or internal teams through timely resolution. Evidence of IGA governance controls for audit engagements (e.g., SOX, Dodd Frank, SOC 2, internal audit), preparing walkthroughs, evidence packs, and remediation tracking. Maintain technical documentation, runbooks, SOPs, and architecture diagrams; keep them current as integrations …/Azure AD, Active Directory, Amazon AWS) and common enterprise environments (Linux, Windows Server). Experience supporting audit or regulatory engagements (SOX, Dodd Frank, SOC2), including evidence preparation, control walkthroughs, and remediation tracking. Strong written and verbal communication skills; able to present technical concepts clearly to both engineering peers and ...

Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS systems (Wazuh preferred).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience securing ...

Github Actions, Concourse, CircleCI)Familiarity with maintaining HIDS systems (Wazuh preferred).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them. Hands-on experience with building and maintaining a SIEM comprised of open-source and hosted componentsExperience ...

reluctant for manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

reluctant for manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...