Information Security Operations Specialist
Core
Technical writer in security compliance who translates engineering expertise into auditor-understandable content for SaaS risk management.
Role type
Senior IC technical writer (security compliance)
Builds
Internal control environment, security policies, and compliance evidence for SaaS risk management
Domain
Financial crimes risk management, SaaS security compliance, regulatory obligations
Deliverable
dashboards & analysis
Required skills
Technical writing, IT security principles, multi-tenant SaaS architecture evaluation, SOC 2/PCI controls, NIST frameworks, ISO 27001, Data Privacy compliance (GDPR/CCPA/CPRA), risk assessment, SDLC/change control, stakeholder mapping
Preferred skills
JIRA, Confluence, Drata, CMMC, FISMA
Technologies
NIST 800 series, ISO 27001, SOC 2, PCI, GDPR, CCPA, CPRA, CMMC, FISMA
Responsibilities
Convert subject matter expertise into technical content for auditors, annotate network architecture diagrams, create and update security policies, interview technical SMEs for compliance questionnaires, evaluate risks in multi-tenant SaaS architectures
Seniority
Senior, hands-on IC