Design, implement, and maintain security controls, policies, and procedures to safeguard systems, networks, and data
Monitor security events, vulnerabilities, and threats; investigate and respond to incidents
Manage security tools such as SIEM, DLP, endpoint protection, IAM, and vulnerability scanning solutions
Conduct regular risk assessments, penetration testing coordination, and security reviews
Ensure compliance with regulatory and industry frameworks (e.g., ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS, NIST, CIS)
Lead and support internal and external audits, assessments, and compliance reviews
Develop, update, and enforce information security policies, standards, and guidelines
Conduct security awareness and compliance training for employees
Provide regular security and compliance reports to management and leadership

Bachelor’s degree in Information Security, Computer Science, IT, or a related field
6+ years of experience in information security, compliance, governance, or risk management
Strong knowledge of security frameworks, regulatory standards, and compliance requirements
Hands-on experience with security technologies and controls
Experience supporting audits and regulatory assessments
Strong analytical, documentation, and problem-solving skills

Security and Compliance Administrator

Key skills