Information Security & Compliance Engineer

OfficeRnD•Boynton Beach, FL

1d•Hybrid

About The Position

Joining OfficeRnD means leading the forefront of securing data in a critical SaaS platform, in an environment where your contributions directly influence our success and customer trust. This pivotal role is central to ensuring our platform remains synonymous with security and trust for our clients. The successful candidate will be responsible for enhancing our robust information security framework, ensuring compliance with relevant standards, and leading our security initiatives to new heights.

Requirements

2 + years of direct experience in information security and compliance. Within SaaS environments, present a significant advantage
Experience in achieving and upholding SOC 2 compliance and ISO 27001 certification, with a keen understanding of their critical success factors
Expertise in managing security-focused communications with customers and partners, adept at conveying complex security measures in an accessible manner
Strong knowledge of internal auditing, risk assessments, and security training methodologies
Commitment to staying up-to-date on the latest security trends and technologies, with professional certifications (e.g., CISSP, CISM, CCSP) highly regarded
Excellent collaboration and communication skills, capable of leading cross-departmental initiatives and instilling a security-first mindset across the company
Proficiency in spoken and written English

Responsibilities

Lead the identification and mitigation of vulnerabilities within our security architecture, advancing our defense mechanisms against emerging threats
Maintain and exceed compliance with SOC 2 and ISO 27001 standards, embodying a culture of continuous improvement in our security practices
Direct security dialogue with customers and partners, reinforcing OfficeRnD’s commitment to data security and integrity
Conduct comprehensive internal audits, access reviews, and security training sessions, including sophisticated phishing awareness programs
Implement and refine risk management strategies to proactively address potential security threats
Develop, enforce, and periodically review information security policies and procedures, ensuring alignment with industry best practices and regulatory requirements
Serve as the primary information security advisor within the organization, promoting a proactive approach to data protection and compliance