{"schemaVersion":"jobsearcher.job.v1","id":"f587f4a36e2ff1fb01b8feb7","url":"https://jobsearcher.com/jobs/f587f4a36e2ff1fb01b8feb7","canonicalUrl":"https://jobsearcher.com/jobs/f587f4a36e2ff1fb01b8feb7","title":"Information Security Engineer - (Remote)","description":"About usInsider One is the #1 platform that brings everything marketing and customer engagement teams need in one place so they can reach their peak potential and become unstoppable.Our story began with six desks and a vision to create a single platform to make industry-first technologies and emerging channels accessible to marketers worldwide. Today, Insider One is powered by 1,500+ team members representing 50+ nationalities across 30+ offices. With AI at its core and an integrated Customer Data Platform (CDP), Insider One unites data, personalization, and journey orchestration across the most extensive set of natively supported channels, including WhatsApp, SMS, Email, Web, App, and Site Search.We recently raised one of the largest funding rounds in the industry, a $500M Series E led by General Atlantic. We are backed by top-notch investors, including Sequoia Capital, QIA, Riverwood, and Endeavor Catalyst, and trusted by 2000+ customers from high-growth startups to the most prestigious Fortune 500 companies such as Samsung, Nike, L'Oreal, Singapore Airlines, Nestlé, Nissan, Lenovo, Puma, IKEA, Allianz, Domino's, and the list goes on.Insider One was congratulated for becoming one of the only woman-founded, women-led B2B SaaS unicorns in the world. Loved by customers, recognized by analysts, we are the only vendor recognized as the #1 leader in all the capabilities marketing and customer engagement teams need. Don't just take our word for it — see for yourself. We consistently outperform and continue our leadership, and the results speak for themselves.From day one, Insider One's mission has not only been to build a world-class product company, but also to create one of the most socially progressive technology communities in the world. Through our social responsibility initiatives like 100 Social Responsibility Projects, AI Training for Teachers, Code Academy, SheCodes, SheLeads, and SheMarkables, our community has committed to scaling its impact on our communities across 30+ countries, driving initiatives in health, education, farming, animal rights, and increasing women's representation in STEM.Behind all these achievements is an exceptionally talented, visionary team of overachievers that moves fast and agile, creating cutting-edge products, and focuses on making an impact. If you want to be a part of this journey, just keep reading.What You Will DoDrive the implementation, maintenance, and continuous improvement of the ISO 27001 Information Security Management System (ISMS), including control maturity tracking and audit readinessSupport SOC 2 Type II compliance efforts, including control implementation, evidence collection, and audit coordinationConduct and document internal audits, manage findings, and follow up on remediation plans across teamsOwn and evolve the company-wide risk management program, including risk register, scoring methodology, risk acceptance, and exception processesProvide governance and security oversight for AWS environments, including cloud security posture, access controls, and configuration baselinesCollaborate with Red Team and Blue Team to track, prioritize, and close technical security findingsMaintain, update, and enforce security policies, standards, and procedures across the organizationDesign and execute security awareness and training programs tailored to different roles (engineering, ops, business)Lead third-party/vendor security assessments, including risk evaluation, tiering, and continuous monitoringSupport and coordinate security incident handling, reporting, and post-incident review processesContribute to data protection and privacy governance (KVKK, GDPR), including DPIA processes and data lifecycle managementDrive AI / LLM governance practices, including secure usage policies, data exposure controls, and risk assessments for AI toolsAct as a security consultant to business units and engineering teams, supporting secure architecture, design reviews, and risk-based decision makingContribute to security architecture and design review processes, including threat modeling and secure design guidanceCoordinate and enhance business continuity and disaster recovery (BCP/DR) processes, including testing, documentation, and continuous improvementWhat You Will NeedStrong knowledge of ISO 27001, ISMS processes, internal audits, and control frameworksHands-on experience with risk management practices, including risk identification, scoring, and mitigation trackingExperience in Business Continuity Management (BCM) and disaster recovery planningSolid understanding of AWS services and cloud security governance, including IAM, logging, and baseline hardeningFamiliarity with SOC 2 Type II framework and control domainsUnderstanding of data security concepts, including data classification, data inventory, and data protection mechanismsExperience with vendor security and third-party risk management processesKnowledge of privacy regulations such as KVKK and GDPR, including practical implementationFamiliarity with AI/LLM risks and governance concepts is a strong plusStrong documentation and reporting skills for audits, compliance, and executive visibilityExperience in responding to customer security questionnaires and auditsSoft Skills & ExpectationsStrong analytical thinking and ability to assess both technical and business risksAbility to take ownership of security domains and drive initiatives end-to-endExcellent written and verbal communication skills in EnglishStrong collaboration skills with both technical (engineering, DevOps) and non-technical teamsAbility to understand and communicate the business impact of security decisionsCapable of evaluating the security posture across cloud, application, endpoint, and data layersComfortable acting as a trusted advisor and consultant to internal stakeholdersProactive mindset with a focus on continuous improvementAdditional ExpectationsWillingness to provide on-call support for security-related incidents when necessaryOwnership of security projects from planning to execution and closureAbility to track, validate, and close findings from audits, pentests, and internal reviewsExperience working with ticketing systems (Jira, etc.) to manage security tasks and follow-upsActively contributes to team collaboration, knowledge sharing, and process improvementAbility to communicate clearly with internal teams, auditors, and external stakeholdersMaintains a positive and solution-oriented mindset in a fast-paced environmentWhat We OfferEnjoy a monthly meal allowance designed to enhance your daily routine.Access comprehensive private health insurance.Feed your curiosity with access to Spotify, LinkedIn Learning, Blinkist, MasterClass, Neoskola, and CloudGuru.Level up with internal trainings covering AI fundamentals, coding, foreign languages, and a wide range of personal development skills.Be part of a diverse team that's as global as it gets, where every voice is heard and 50+ nationalities build together.Become a Shareowner through our eligibility-based \"ESOP\" and own a piece of what you build.Help build the team you want to work with and enjoy rewarding referral bonuses.Opportunities to give back to your community through volunteering and purpose-driven social impact projects.From global retreats to team-building activities, expect year-round events that turn into lifelong memories.Get inspired by the greatest minds in the tech industry through events like our Tech & Dev Talks.Work from anywhere in Turkey through our fully remote setup.","company":"Remote Services","rawCompany":"remote services","city":"Millbrae","state":"CA","isRemote":true,"isActive":false,"createdAt":"2026-11-07T14:25:27.612Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Information Security Engineer - (Remote)","description":"About usInsider One is the #1 platform that brings everything marketing and customer engagement teams need in one place so they can reach their peak potential and become unstoppable.Our story began with six desks and a vision to create a single platform to make industry-first technologies and emerging channels accessible to marketers worldwide. Today, Insider One is powered by 1,500+ team members representing 50+ nationalities across 30+ offices. With AI at its core and an integrated Customer Data Platform (CDP), Insider One unites data, personalization, and journey orchestration across the most extensive set of natively supported channels, including WhatsApp, SMS, Email, Web, App, and Site Search.We recently raised one of the largest funding rounds in the industry, a $500M Series E led by General Atlantic. We are backed by top-notch investors, including Sequoia Capital, QIA, Riverwood, and Endeavor Catalyst, and trusted by 2000+ customers from high-growth startups to the most prestigious Fortune 500 companies such as Samsung, Nike, L'Oreal, Singapore Airlines, Nestlé, Nissan, Lenovo, Puma, IKEA, Allianz, Domino's, and the list goes on.Insider One was congratulated for becoming one of the only woman-founded, women-led B2B SaaS unicorns in the world. Loved by customers, recognized by analysts, we are the only vendor recognized as the #1 leader in all the capabilities marketing and customer engagement teams need. Don't just take our word for it — see for yourself. We consistently outperform and continue our leadership, and the results speak for themselves.From day one, Insider One's mission has not only been to build a world-class product company, but also to create one of the most socially progressive technology communities in the world. Through our social responsibility initiatives like 100 Social Responsibility Projects, AI Training for Teachers, Code Academy, SheCodes, SheLeads, and SheMarkables, our community has committed to scaling its impact on our communities across 30+ countries, driving initiatives in health, education, farming, animal rights, and increasing women's representation in STEM.Behind all these achievements is an exceptionally talented, visionary team of overachievers that moves fast and agile, creating cutting-edge products, and focuses on making an impact. If you want to be a part of this journey, just keep reading.What You Will DoDrive the implementation, maintenance, and continuous improvement of the ISO 27001 Information Security Management System (ISMS), including control maturity tracking and audit readinessSupport SOC 2 Type II compliance efforts, including control implementation, evidence collection, and audit coordinationConduct and document internal audits, manage findings, and follow up on remediation plans across teamsOwn and evolve the company-wide risk management program, including risk register, scoring methodology, risk acceptance, and exception processesProvide governance and security oversight for AWS environments, including cloud security posture, access controls, and configuration baselinesCollaborate with Red Team and Blue Team to track, prioritize, and close technical security findingsMaintain, update, and enforce security policies, standards, and procedures across the organizationDesign and execute security awareness and training programs tailored to different roles (engineering, ops, business)Lead third-party/vendor security assessments, including risk evaluation, tiering, and continuous monitoringSupport and coordinate security incident handling, reporting, and post-incident review processesContribute to data protection and privacy governance (KVKK, GDPR), including DPIA processes and data lifecycle managementDrive AI / LLM governance practices, including secure usage policies, data exposure controls, and risk assessments for AI toolsAct as a security consultant to business units and engineering teams, supporting secure architecture, design reviews, and risk-based decision makingContribute to security architecture and design review processes, including threat modeling and secure design guidanceCoordinate and enhance business continuity and disaster recovery (BCP/DR) processes, including testing, documentation, and continuous improvementWhat You Will NeedStrong knowledge of ISO 27001, ISMS processes, internal audits, and control frameworksHands-on experience with risk management practices, including risk identification, scoring, and mitigation trackingExperience in Business Continuity Management (BCM) and disaster recovery planningSolid understanding of AWS services and cloud security governance, including IAM, logging, and baseline hardeningFamiliarity with SOC 2 Type II framework and control domainsUnderstanding of data security concepts, including data classification, data inventory, and data protection mechanismsExperience with vendor security and third-party risk management processesKnowledge of privacy regulations such as KVKK and GDPR, including practical implementationFamiliarity with AI/LLM risks and governance concepts is a strong plusStrong documentation and reporting skills for audits, compliance, and executive visibilityExperience in responding to customer security questionnaires and auditsSoft Skills & ExpectationsStrong analytical thinking and ability to assess both technical and business risksAbility to take ownership of security domains and drive initiatives end-to-endExcellent written and verbal communication skills in EnglishStrong collaboration skills with both technical (engineering, DevOps) and non-technical teamsAbility to understand and communicate the business impact of security decisionsCapable of evaluating the security posture across cloud, application, endpoint, and data layersComfortable acting as a trusted advisor and consultant to internal stakeholdersProactive mindset with a focus on continuous improvementAdditional ExpectationsWillingness to provide on-call support for security-related incidents when necessaryOwnership of security projects from planning to execution and closureAbility to track, validate, and close findings from audits, pentests, and internal reviewsExperience working with ticketing systems (Jira, etc.) to manage security tasks and follow-upsActively contributes to team collaboration, knowledge sharing, and process improvementAbility to communicate clearly with internal teams, auditors, and external stakeholdersMaintains a positive and solution-oriented mindset in a fast-paced environmentWhat We OfferEnjoy a monthly meal allowance designed to enhance your daily routine.Access comprehensive private health insurance.Feed your curiosity with access to Spotify, LinkedIn Learning, Blinkist, MasterClass, Neoskola, and CloudGuru.Level up with internal trainings covering AI fundamentals, coding, foreign languages, and a wide range of personal development skills.Be part of a diverse team that's as global as it gets, where every voice is heard and 50+ nationalities build together.Become a Shareowner through our eligibility-based \"ESOP\" and own a piece of what you build.Help build the team you want to work with and enjoy rewarding referral bonuses.Opportunities to give back to your community through volunteering and purpose-driven social impact projects.From global retreats to team-building activities, expect year-round events that turn into lifelong memories.Get inspired by the greatest minds in the tech industry through events like our Tech & Dev Talks.Work from anywhere in Turkey through our fully remote setup.","datePosted":"2026-11-07T14:25:27.612Z","dateModified":"2026-11-07T14:25:27.612Z","hiringOrganization":{"@type":"Organization","name":"Remote Services","sameAs":"https://jobsearcher.com"},"jobLocationType":"TELECOMMUTE","applicantLocationRequirements":{"@type":"Country","name":"US"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f587f4a36e2ff1fb01b8feb7"},"url":"https://jobsearcher.com/jobs/f587f4a36e2ff1fb01b8feb7"}}