Information Security Operations Specialist (Contract)

About the role

This role independently interprets Vanta tests and maintenance requirements, coordinates technical evidence and remediation, and brings practical security expertise to vulnerability management, penetration testing, and security improvements. The GRC lead owns program direction, governance, and audit coordination.

What you'll do

• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable
• Coordinate penetration testing and DAST: define scope, manage providers and access, review findings, track remediation, and organize retesting
• Triage and prioritize findings based on severity, exposure, exploitability, and business impact; drive remediation with Engineering and Infrastructure, verify closure
• Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction
• Maintain practical security documentation, metrics, remediation records, and technical response playbooks

What you need

• Vulnerability assessment
• Penetration testing
• ISO 27001
• OWASP
• Incident response
• AWS
• Any graduate

Good to have

• Kubernetes
• Due diligence
• Terraform
• Data privacy