26 to 35 of 35 Remote/Hybrid SOC 2 Jobs

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...

Stay informed about emerging threats and trends, integrating this knowledge into the security testing processes Support the firm's certification activities, such as ISO27001, SOC2, and Cyber Essentials Plus, by assisting with audits, documentation, and continuous improvement efforts. Engage with security industry groups and collaborate with external industry partners ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management ...

/LLM adoption across engineering and business units. Compliance & Governance Alignment: Ensure technical security controls natively satisfy key regulatory frameworks—including ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.Pragmatic Technical Advisory: Translate high-level security requirements into actionable, practical guidance … security considerations surrounding AI integration, data privacy, and model risk management. Frameworks & Compliance: Hands-on experience mapping technical controls to ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.Programme Delivery: Strong project and programme management skills, with a proven track record ...

Preferred: Certifications such as CompTIA A+, Network+, or Microsoft 365 Fundamentals . Experience with Vertafore (AMS360, ImageRight) or Salesforce. Familiarity with compliance frameworks (NYDFS, SOC 2, HIPAA). Total Rewards Package: Compensation: $65,000 - $70,000, based on experience, education, and work location. Benefits: Comprehensive package including Medical ...

losing sight of the bigger picture. Nice to haveApple certifications (e.g., Apple Certified IT Professional) or Microsoft endpoint certificationsExposure to compliance frameworks such as SOC 2 or ISO 27001Experience with modern support and workflow tools, such as a help desk platform (Freshdesk, Plain, Zendesk) or an issue tracker ...

native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 … infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Summary: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. ...

posture of global networking infrastructure, corporate VPN, and perimeter tooling (e.g., Cloudflare) to prevent unauthorized exposure. Design and deploy internal tooling to support the SOC and Security Engineering teams. Conduct threat modeling, design reviews, and architectural assessments for new and existing systems. Maintain internal security documentation, standard operating procedures …/WAF, SIEM, Wazuh/HIDS, EDR, and incident-management platforms).NICE TO HAVEKnowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them. Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components. Experience ...

objectives and IPO readiness. Foster a culture of security across the company by being a strong business-enabler. Lead and scale the Security Engineering, SOC and Security GRC organizations. Partner with executive leadership and the internal audit team on cybersecurity strategy, enterprise risk and regulatory readiness. Strengthen our cloud … security assessments to Board meetings, regulators, and examiners to demonstrate operational resilience and risk mitigation effectiveness. Ensure compliance with industry standards and frameworks, including SOC 1/2, ISO 2700, ISO 42001, DoRA, SOX and other applicable regulatory requirements. Embed security into the software development lifecycle while enabling ...