IT Security Engineer

About the role

This role ensures that SOC‑related security controls are not only documented, but demonstrably effective through continuous testing, evidence validation, and cross‑functional collaboration. The position contributes to proactive risk reduction by enabling timely remediation, improving audit outcomes, and embedding a culture of continuous compliance across IT and security teams.

What you'll do

• Support SOC 2 (Type I & Type II) , Future ISO 27001 readiness, and internal security audits as they relate to SOC and IT operations
• Coordinate and manage audit evidence collection from SOC, endpoint, identity, and infrastructure teams
• Perform control design and operating effectiveness reviews for SOC adjacent controls
• Track audit findings, risks, and remediation actions through closure
• Maintain continuous audit readiness rather than point-in-time compliance

What you need

• 2–6 yrs of experience
• Vulnerability assessment
• ISO 27001
• DLP
• IAM
• CISA
• Compliance
• Any graduate

Good to have

• Intune
• Internal audit
• Go-to-market