SRM Technologies

Security Engineer

• Conduct security assessments of third-party vendors, suppliers, and service providers.
• Review SOC 2 reports, ISO 27001 certifications, penetration testing reports, security questionnaires, and architecture documentation.
• Assess controls related to data protection, IAM, infrastructure security, incident response, and business continuity.
• Document findings, risk ratings, remediation recommendations, and approval decisions.
• Perform security reviews of SaaS platforms, enterprise applications, and corporate technology solutions.
• Evaluate authentication, authorization, data handling, integrations, logging, monitoring, and security posture.
• Assess emerging technologies, including AI-enabled solutions.
• Execute assessments in accordance with established standards and procedures.
• Maintain complete assessment documentation, evidence, findings, and recommendations.
• Track remediation activities and assessment status.

Corporate Security Architect