Information Security

Requirements

Must have:

- 2-4 years experience in information security, GRC, IT audit, or a closely related role - Strong experience producing security documentation, policies, and evidence linking compliance requirements to real technical controls - Hands-on exposure to security testing methodologies, including vulnerability assessment and penetration testing - Confident working within Google Cloud Platform, particularly IAM, Cloud Storage, and logging/monitoring services - Solid understanding of cloud security concepts; exposure to Kubernetes or containerized environments is highly beneficial - Comfortable acting as a technical translator between security frameworks and engineering implementation

Responsibilities:

- Take full ownership of the compliance programme, maintaining PCI Level 1 and leading the delivery of SOC 2 and ISO Act as the operational owner of Sprinto, ensuring controls remain effective, evidence is maintain...