Security & Compliance Engineer, Hasura

• The successful candidate will have a strong understanding of security architectures, compliance standards, and risk management, and be able to work effectively with various teams across the organization to ensure optimal security and compliance
• Minimum of 2 years of experience in software development
• Minimum of 2 years of experience in information security, compliance, or related field
• Proven experience in developing and implementing security policies and procedures
• Experience with security frameworks and standards (e.g., NIST, ISO 27001)
• Certifications in security and compliance such as CISSP, CISM, or CISA are preferred
• Strong knowledge of information security concepts, risk assessment methodologies, and compliance standards
• Familiarity with various security technologies such as firewalls, intrusion detection systems, and encryption technologies
• Familiarity with major Cloud providers - AWS, GCP, Azure
• Excellent verbal and written communication skills
• Strong problem-solving and analytical skills
• Previous experience handling ISO/SOC2 audits for the organization
• Strong interest in working in a high growth, fast-paced and dynamic startup environment

Desirable

• PromptQL is seeking a dedicated and knowledgeable Security and Compliance Engineer to join our team
• In this role, you will be responsible for ensuring that our organization is in compliance with all relevant regulations and standards and that our systems are secure from potential threats
• Risk Assessment and Management:
• Conduct comprehensive risk assessments and audits
• Identify vulnerabilities and ensure that appropriate security controls are in place
• Security Policy and Procedures:
• Develop, implement, and maintain company security policies, procedures, and standards
• Provide security training and awareness programs to staff to ensure compliance with security policies
• Develop and implement policies for cloud infrastructure security
• Compliance Management:
• Ensure compliance with relevant industry standards, regulations, and laws such as GDPR, HIPAA, and ISO 27001
• Stay up-to-date with the latest regulatory changes and advise the company on compliance-related matters
• Incident Response:
• Participate in incident response planning and activities
• Investigate and analyze security breaches and other cyber security incidents
• Vendor Management:
• Evaluate the security and compliance of third-party vendors
• Work with vendors to resolve any security and compliance issues
• Setup systems to make sure that software dependencies are tracked and scanned for vulnerabilities and license compliance
• Pentests and Audits:
• Conduct internal pentests and audits
• Advise teams on fixes and remediations