Information Security Engineer - (Remote)
Core
Drive ISO 27001 ISMS implementation, SOC 2 Type II compliance, and enterprise-wide risk management for a B2B SaaS platform.
Role type
Senior Information Security Engineer (Governance & Compliance)
Builds
Security governance frameworks, compliance evidence, and risk management programs for a global marketing platform.
Domain
B2B SaaS / Marketing Technology / Cloud Security
Deliverable
dashboards & analysis
Required skills
ISO 27001, ISMS, SOC 2 Type II, Risk Management, AWS Cloud Security, Vendor Risk Management, GDPR/KVKK, AI/LLM Governance
Preferred skills
AI/LLM risks, Business Continuity Management (BCM), Threat Modeling
Technologies
AWS, ISO 27001, SOC 2, GDPR, KVKK
Responsibilities
Drive ISO 27001 ISMS implementation and maintenance; Support SOC 2 Type II compliance efforts; Conduct internal audits and manage findings; Own the company-wide risk management program; Provide governance and security oversight for AWS environments; Collaborate with Red Team and Blue Team to close technical findings; Design and execute security awareness training programs; Lead third-party/vendor security assessments; Support security incident handling; Contribute to data protection and privacy governance (KVKK, GDPR); Drive AI/LLM governance practices; Act as a security consultant to business units; Contribute to security architecture and design review processes; Coordinate business continuity and disaster recovery (BCP/DR) processes.
