Information Security Compliance Specialist, Binalyze
More information about location
Boost cyber resilience with rapid investigation and response
Open for applications
Boost cyber resilience with rapid investigation and response
21-100 employees
Open for applications
More information about location
21-100 employees
Company mission
To streamline all investigations, enhance cyber resilience, and deliver accessible forensic-level insights at unmatched speed and scale.
Role
Who you are
- Experience in IT security and compliance, including experience with regulatory compliance frameworks such as ISO 27001, ISO 27701, ISO 22301, SOC2, GDPR and NIST 800-53
- Strong knowledge of information security and business continuity principles, practices, and technologies, including network security, access controls, cryptography, and security operations
- Strong understanding of ISMS/BCMS documentation
- Experience with security assessments, business continuity tests, audits, and compliance reporting
- Related professional certifications such as CISA, ISO/IEC 27001 Lead Auditor, ISO 22301 Lead Implementer, GSEC, and CompTIA Security are preferred
- Deep understanding of information security and business continuity controls, compliance requirements, and regulatory frameworks
- Proficiency in managing GRC tools such as Drata and maintaining ISMS/BCMS documentation
- Experienced in conducting, responding to, and remediating audits and assessments for security and business continuity
- Exceptional (English) written and verbal communication skills, with the ability to craft clear, persuasive, and comprehensive audit responses, reports, and policies
- Adept at translating complex technical concepts into accessible language for non-technical stakeholders, ensuring alignment and understanding across teams
- Skilled in writing formal security documentation, policies, and executive-level reports that effectively communicate risk, compliance status, and security recommendations
- Strong ability to present security findings, risks, and mitigation strategies in a compelling and structured manner
- Works closely with all teams to ensure alignment between security controls and continuity measures
- Analytical and Problem-solving skills: Ability to use metrics, risk assessments, and compliance data to inform security and business continuity strategies
- Project management: Experience leading projects to enhance both security frameworks and business continuity strategies
- Initiative: Proactive in identifying risks related to both information security and business continuity
- Able to maintain focus and effectiveness under pressure during security incidents or business disruptions
- Able to respond to both security incidents and business continuity challenges in real-time
- Growth Mindset: Committed to continuous learning and improvement
- Remote Working: Demonstrates strong self-management skills for effective remote collaboration
What the job involves
- The Information Security Compliance Specialist ensures that Binalyze’s Information Security Management System (ISMS) and Business Continuity Management System (BCMS), including its systems, processes, and procedures comply with internal policies and external regulatory requirements
- The role must maintain a strong knowledge of industry standards and best practices related to information security, compliance, and risk management. The role collaborates with various teams, including engineering, finance, sales, marketing and people to ensure that information security practices are aligned with company goals and integrated into business operations
- The specialist coordinates with external auditors to assess compliance with applicable regulations and provide subject matter expertise to the other teams for projecting Binalyze’s information security practices to external parties and partners
- Develop and maintain information security policies, procedures, and guidelines in accordance with industry standards and regulatory requirements
- Supervise (monitor, assess and communicate) Binalyze’s information security risks management system
- Collaborate with the information security team to implement and maintain effective security controls, including secure coding, threat hunting, incident response, system monitoring, and business continuity, and participate in incident response activities
- Conduct security assessments and audits to ensure compliance with applicable regulations, such as ISO 27001, ISO 22301, ISO 27701, SOC II, and GDPR
- Serve as a liaison with external auditors and regulators to provide evidence of compliance and facilitate audits and assessments
- Develop, implement, and maintain a comprehensive risk management framework to identify, assess, and mitigate information security and business continuity risks, ensuring that risks are communicated effectively across the organization and addressed in a timely manner
- Develop and deliver information security training and awareness programs to educate employees on information security policies and procedures
- Stay up-to-date on the latest information security trends, technologies, and best practices, as well as relevant regulations and laws, and provide recommendations for improving the organisation’s security and compliance posture
- Manage and supervise Binalyze’s GRC tool and ISMS/BCMS documentation
- Ensure alignment between information security controls and business continuity measures, ensuring that both disciplines work together to protect critical assets and ensure operational resilience
Our take
With an ever-increasing onslaught of cyber threats, companies often have to adapt their security measures to meet the growing dangers of hacks and viruses. With more than half of larger companies dealing with anywhere between a hundred and thousand cybersecurity alerts every day, traditional cybersecurity tools are being outpaced, both technologically and professionally.
Binalyze tackles this problem by rocket-boosting the way that companies respond to these threats. With companies often taking days or weeks to fully assess the scale of a breach, Binalyze sells tools and platforms that can quickly capture a wide scale snapshot of the damage caused, with digital forensics reports generated per incident in under 10 minutes.
More companies are shifting digital than ever before, positioning the fast-growing Binalyze in a strong position to acquire large clients such as KPMG and Turkish Airlines who are currently on their books. 2022 funding to the sum of $9.1 million will strengthen Binalyze’s cloud-native capabilities and retain its position as one of the fastest Enterprise Forensics Platforms currently operating.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
Sep 2023
$19m
SERIES A
Feb 2022
$9.6m
SERIES A
Total funding: $30.3m
Company benefits
- A flexible working environment - fully remote
- Great opportunities for career development
- Home office setup support
- Growth mindset fund - books/courses for learning & development
- Health insurance - we offer health insurance for all of our team members and their dependents
- 28 days holiday per year (plus public holidays)
- You birthday off!
- 6 wellbeing days per year
- 5 weeks paid secondary carer leave
- 16 weeks paid primary carer leave
- Annual wellbeing allowance
- 5 week fully paid sabbatical after 5 years service.
Company values
- We before me
Company HQ
Sadama, Tallinn, Harju County
Leadership
Emre Tinaztepe
(CEO)Previously Instructor on Malware Analysis at Private University, Director of Development at Zemana Ltd and Malware Analysis Team Lead at Comodo.
Share this job