ISO 27001/SOC 2 auditor

Experienced Information Security Consultant/auditor
Industry: Information Security, Information Technology
Seniority Level: Middle
Working on US Time Zone

About GRSee Consulting, Inc.:
GRSee Consulting, Inc. was established by a team of security experts with interdisciplinary knowledge and vast experience in the field of information security. GRSee provides numerous services in the field of information security, application security, penetration testing services, cyber services, APTs, threat modeling, secure architectures & design, and multi-regulation enterprise environments. GRSee provides consulting, testing, and certification services in the field of cybersecurity, information security, and compliance. The company provides a range of security services to a myriad of organizations, including Enterprises, Fintech, Hitech, Payment Gateways, Online Gaming, Forex, Financial, and Insurance.

Among our core services are the following:
• Audit & regulations – PCI DSS, ISO 27001, ISO27701, HIPAA, WLA.
• Risk assessments – custom risk assessments for sectorial regulators (Banking oversight & Insurance oversight).
• Information security services such as – black/ grey/ white box penetration testing, risk surveys based on various security frameworks, gap analysis.
• Ongoing consulting services.
• Training – global training and awareness projects & in-depth training for developers/ QA team and other focused groups.

About the Role: We are looking for an experienced Information Security Consultant for our evolving US company. Suitable candidates will have the chance to operate and report directly to the company’s COO, to manage and lead miscellaneous technical projects, and to help companies and organizations in various fields achieving certification in Information Security-related standards.

Main Job Responsibilities:
• Work remotely with the US-based clientele
• Participate in ISO 27001, SOC 2, and PCI DSS projects
• Participate in and perform risk assessments and various information security assessments
• Provide support as a vCISO for a select number of customers

Mandatory Job Qualifications:
• 3+ years in Information Security
• Relevant knowledge and certifications such as ISO 27001 lead implementer/auditor, CISA, CISM, PCI QSA
• Ability to prioritize and motivate cross-organizational processes, setting goals and meeting objectives
• Audit experience

Preferred Job Qualifications:
• Project management background and experience
• 1-2+ years of system experience in Linux and Windows server (in Domain environment)