Security Engineer

• Define, maintain and evolve a risk-based security strategy and roadmap aligned to business objectives.
• Lead formal risk assessments, maintain a risk register, and prioritize remediation by business impact and likelihood.
• Translate risk decisions into measurable security initiatives and KPIs.
• Own end-to-end ISO 27001 and SOC 2 programs and ensure timely completion of annual audits (internal and external).
• Coordinate audit planning, evidence collection, remediation tracking, and auditor liaison.
• Maintain policy acceptance and staff compliance using our GRC platform. Drive attestations, exceptions, corrective actions, and reporting.
• Prepare readiness assessments, internal audit schedules, and continuous monitoring to maintain certification and attestations.
• Create, revise and operationalize security policies, standards and procedures to ensure they are functional, enforceable, and compliant with ISO 27001, SOC 2 and applicable laws/regulations.
• Serve as the company’s primary internal and external representative for security concerns, events, and incident response activities.
• Mentor, and grow security team members; set clear objectives and career development plans.
• Own budgeting and sourcing of security tools and services.

Security Manager

Security Research Manager, Coverage Team

Senior Security Engineer

Security Engineer, Privacy

Corporate Security Manager – Design & Construction

Manager, Information Security Compliance