Senior Information Security Specialist, Halcyon

• 5+ years of experience in information security, GRC, or IT risk management
• Strong understanding of cybersecurity concepts, controls, and risk frameworks
• Demonstrated experience with third-party risk management processes and tooling
• Proven ability to coordinate security testing and vulnerability management efforts
• Excellent communication, documentation, and cross-functional collaboration skills
• Ability to assess and implement technical and administrative controls across cloud and hybrid environments
• Experience with regulatory compliance and audit support in fast-paced environments
• Hands-on participation in incident response or disaster recovery exercises is a plus

Desirable

• Halcyon is seeking a seasoned and collaborative Senior Information Security Specialist to support the advancement of our cybersecurity and GRC (Governance, Risk, and Compliance) programs
• In this role, you will play a critical part in strengthening our enterprise-wide security posture by coordinating across teams, managing third-party risk, supporting compliance initiatives, and maturing internal security processes and documentation
• Your responsibilities will span operational security, risk assessment, policy development, and incident response preparedness
• Perform and maintain third-party risk assessments and track vendor remediation activities
• Support coordination and analysis of internal and external security testing, including vulnerability scans and penetration tests
• Develop, track, and follow up on corrective action plans for identified security gaps or audit findings
• Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations
• Partner with engineering and operations teams to ensure implementation of security and compliance requirements across the organization
• Assist in developing, maintaining, and communicating information security policies, standards, and procedures
• Coordinate security incident response planning, disaster recovery testing, and business continuity exercises
• Monitor and support enforcement of technical and administrative security controls across the enterprise
• Stay current with evolving security and privacy regulations and frameworks (e.g., SOC 2, ISO 27001, TX-RAMP, FedRAMP)