Information Security & Privacy Specialist (4-6 yrs)

As an Information Security and Privacy Specialist, you will be responsible for ensuring the security and privacy of our SaaS applications and data. You will develop, implement, and manage information security policies and procedures to protect sensitive information and ensure compliance with relevant regulations.

Key Responsibilities :

Security Policy Development :

- Develop, implement, and maintain information security and privacy policies, procedures, and guidelines.

- Ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA, CCPA).

Risk Assessment and Management :

- Conduct regular risk assessments to identify vulnerabilities and recommend mitigation strategies.

- Monitor and evaluate the effectiveness of security controls and protocols.

Incident Response :

- Lead incident response activities, including identifying, investigating, and resolving security incidents.

- Prepare incident reports and perform root cause analysis to prevent future occurrences.

Training and Awareness :

- Develop and deliver training programs to educate employees on information security and privacy best practices.

- Promote a culture of security awareness within the organization.

Compliance Audits :

- Coordinate and conduct internal audits to assess compliance with information security policies and procedures.

- Prepare for external audits and ensure all required documentation is in place.

Collaboration and Communication :

- Work closely with cross-functional teams, including IT, legal, and product management, to ensure a cohesive approach to information security.

- Serve as a point of contact for all information security and privacy-related inquiries.

Qualifications :

- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.

- 4-6 years of experience in information security, data privacy, or a related field, preferably in a SaaS environment.

- Strong understanding of information security frameworks and compliance requirements (e.g., ISO 27001, NIST, GDPR).

- Experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption).

- Excellent analytical, problem-solving, and communication skills.

- Relevant certifications (e.g., CISSP, CISM, CISA, or equivalent) are preferred.