Information Security Specialist

About the role

The Information Security Specialist will ensure vendor compliance with the company’s information security and data privacy policies, conduct contract reviews and onsite audits, and foster a culture of risk awareness across the organization.

Key responsibilities

• Review vendor contracts and perform onsite security audits to verify compliance.
• Develop consultative relationships with departments to educate on risk management and implement best‑practice controls.
• Monitor, report, and resolve security‑related resolutions across divisions in a timely manner.
• Lead enterprise‑wide security awareness programs and enforce mandatory security policies and standards.
• Govern projects to minimize compliance risks by conducting security risk assessments and prescribing appropriate controls.
• Represent the Information Security function in stakeholder discussions and provide guidance on policy adherence.
• Act as project manager for initiatives owned by the Information Security division.
• Collaborate with IT and business units to address security incidents, breaches, and cyber‑threats reported by the security operations team.

Required profile

• Bachelor’s degree in Computer Engineering, Computer Science, Information Technology or a related technical field.
• Minimum of 2 years of hands‑on experience in information security or data privacy.
• Strong analytical, planning and detail‑orientation skills.
• Excellent written and verbal communication in English.
• Ability to adapt quickly in a fast‑paced environment and understand business impacts on security posture.

Required skills

• Network security
• Identity Access Management (IAM)
• Cloud security – AWS, Azure, Google Cloud
• Endpoint, web and mobile application security
• Familiarity with security frameworks: NIST Cybersecurity Framework, CIS‑CSC, ISO/IEC 27001, Data Privacy Act
• Risk management and GRC (Governance, Risk & Compliance) methodologies
• Data Loss Prevention (DLP), data classification and information protection technologies
• Incident response handling (preferred)