Information Security Engineer

About the Role:

We are seeking a motivated Information Security Engineer with a strong foundation in compliance frameworks. The ideal candidate will have hands-on experience with ISO 27001, HIPAA, SOC 2 and conducting risk assessments.

Key Responsibilities:

● Governance, Risk & Compliance

○ Maintain and improve the organization’s Information Security Management System (ISMS) in alignment with ISO 27001 and AIMS in alignment to ISO 42001.

○ Support compliance efforts for HIPAA and SOC 2 frameworks.

○ Conduct risk assessments, document findings, and recommend remediation strategies.

○ Assist in preparing for internal and external audits.

○ Work with cross-functional teams to improve security posture.

○ Contribute to security awareness training programs.

○ Assist in security incident investigations and root cause analysis.

● Certifications:

○ Mandatory: ISO 27001 Lead Implementer (LI)

● Experience:

○ 2–3 years in information security roles covering GRC domain

○ Hands-on involvement in ISO 27001 implementation/maintenance, HIPAA, and SOC 2 compliance projects.

Desired Skills:

● Knowledge of security standards such as NIST, CIS Controls, and GDPR.

● Strong report writing and communication skills for both technical and non-technical audiences.