Senior Security Analyst / Engineer, Aignostics

• A background in information security or compliance
• A passion for automation (especially ticketing/Jira automation) and documentation
• Proven experience in managing ISO 27001 ISMS implementation and maintenance, including acting as a Lead Implementer or providing support equivalent to Lead Auditor responsibilities
• Deep understanding of information security, compliance frameworks, and regulatory requirements
• Experience with GRC (Governance, Risk, and Compliance) tools and automated compliance solutions
• Experience with audit preparation and evidence management
• Familiarity with scripting and automation tools (e.g., Python, PowerShell, or similar) to automate compliance processes
• Excellent organizational, analytical, and problem-solving skills
• Good communication skills to effectively collaborate with cross-functional teams
• Take the lead in ensuring our compliance and security excellence, where your expertise will shape the future of our security operations and ISMS
• A keen eye for detail and spotting weaknesses in systems
• Ability to collaborate in multi-disciplinary teams effectively

Desirable

• As a Senior Security Analyst / Engineer at Aignostics, you will drive the development and improvement of our Information Security Management System (ISMS) in compliance with ISO 27001 standards
• You will manage compliance documentation, collaborate across departments to ensure accurate evidence for audits, and support internal and external audit processes
• Your role includes conducting risk assessments, implementing mitigation strategies, and automating compliance tasks like evidence collection and monitoring
• Additionally, you will update security policies to meet regulatory standards and foster a culture of security through employee training and awareness programs
• ISO 27001 Compliance Management: Implement and maintain the ISMS framework aligned with ISO 27001 (ideally version 2022) standards, ensuring all compliance requirements are met effectively
• Evidence and Records Management: Maintain and manage all compliance documentation, cross-departmental collaboration (with DevOps, HR, Product, Customer Support, Quality Assurance, and Legal for compliance initiatives) to check past and actual records and evidence for internal and external audits, as well as ensuring accuracy and readiness of them for surveillance audits
• Audit Support: Collaborate with internal teams and external auditors during certification, surveillance, and recertification audits. Prepare and present necessary documentation and evidence to demonstrate compliance
• Risk Assessment and Mitigation: Conduct regular risk assessments and work with stakeholders to implement appropriate mitigation strategies. Update the risk register and monitor corrective and preventive actions
• Automation of Compliance Processes: Leverage programming skills or passion to automate repetitive tasks related to evidence collection, risk assessments, logging, and compliance monitoring
• Information Security Policies and Procedure Management: Develop, review, and update security policies, procedures, and guidelines to ensure they remain relevant and compliant with regulatory requirements and adhere to our Quality Assurance team expectations
• Training and Awareness: Conduct security awareness and compliance training sessions for employees to promote a culture of security and compliance throughout the organization
• Collaboration Across Teams: Work closely with DevOps, Quality Assurance, Legal, Product, and other teams to integrate compliance requirements into everyday operations and projects
• Continuous Improvement: Stay updated with industry trends, standards, and technologies to enhance compliance initiatives and drive continuous improvement in ISMS processes