Full time position at client location in Santa Clara.

Reports to Sr.Director, Business operations.

Responsibilities

manage ISO 27001 certification and various aspects of client's security and compliance framework.
drive continuous improvement of network security workflows and processes through automation and innovation
work with the IT team to detect and prevent any security threat(s) on the network of various computing platforms like Windows, Macs, Linux, mobile devices, heterogeneous networks, AWS, and Microsoft-365 environments.
support new IT projects and implementations by working with end-users, cross functional teams, 3rd party vendors, and consultants
Evaluate and propose best practices/standards, process improvements, and security policies to provide the highest availability, security, and data privacy levels.
ISO Certifications Maintenance: Actively maintain ISO 27001 certification, regularly update policies, and ensure compliance through tools.
Security Incident Management: Systematically record all security incidents detected through monitoring tools or reported by users, aligning with our established security policies.
Vendor Security Assessments: Conduct detailed security assessments of vendors, reviewing SOC2 documentation and other relevant security credentials to ensure alignment with our security standards.

Qualifications

Familiarity with administration of Microsoft 365, Sophos Central, Phishing campaigns, Okta, SaaS, IT HW support, VPN, Wi-Fi, network infra, etc.
Experience in assisting engineering teams with development system configurations
Ability to collaborate effectively with cross-functional teams, including IT, HR, and business units, to align initiatives with organizational goals and security objectives.
Effective communication skills, both written and verbal, with the ability to convey complex security and information.
You have 10+ years of experience supporting and deploying Windows, MacOS, and Linux systems.
Familiar with requirements and security frameworks such as NIST CSF, ISO27001, or SOC2.
Professional certifications such as CISSP, CISM, GSEC, GIAC, CEH, and CPT are preferred.
Expert knowledge of AWS, Network Security Management, design, and deployment.

Bluehatsoft

New Jobs