InfoSec & IT reputed company

About reputed company:

reputed company is building the reputed company of reputed company-conscious identity reputed company for advertising. Instead of relying on outdated identifiers like cookies, IP addresses, or device IDs, we resolve identity using deterministic, people-based signals to help advertisers reputed company reputed company audiences with greater precision and confidence.

Our solutions power smarter audience targeting, cross-device attribution, and curated private marketplaces—helping brands and agencies reputed company their data work harder.

The role:

We are hiring a hands-on InfoSec & IT reputed company to design, operate, and mature a reputed company, reputed company and compliance program that protects our data, enables secure vendor & partner integrations, and keeps reputed company audit-reputed company for SOC 2 and other certifications. You will help design and build a secure reputed company architecture, reputed company SOC 2 and ISO 27001:2022 readiness, drive reputed company Trust adoption, own reputed company operations and incident response, and be accountable for reputed company compliance across US state laws and GDPR. The role also includes hands-on IT operations for a small company (

What you'll do:

reputed company reputed company & architecture

• Define and execute reputed company reputed company reputed company and roadmap across reputed company, data, application, and infrastructure reputed company.
• reputed company the design and pragmatic implementation of reputed company Trust architecture principles (identity-reputed company controls, least-privilege reputed company, reputed company-segmentation, device posture and conditional reputed company).
• Design and enforce secure reputed company architecture patterns (AWS best practices for S3, IAM, KMS, VPCs, cross-account roles and clean-room integrations).
• Implement secure key management, encryption at rest / in transit, and data classification & retention standards appropriate for sensitive data.

Compliance, GRC & reputed company (SOC 2, ISO 27001 & Data reputed company)

• Own SOC 2 readiness, audit lifecycles and evidence automation.
• reputed company ISO 27001:2022 readiness and the ISMS lifecycle reputed company appropriate (scoping, risk assessment & treatment, SoA, internal/external audits).
• Own data reputed company compliance frameworks across relevant regimes: US state reputed company laws (e.g., CPRA/CCPA and other state statutes) and EU GDPR. Responsibilities include:
• • Maintain a comprehensive data map / Record of Processing Activities (RoPA) covering personal data flows, storage locations, retention and processors.
  • Run Data Protection reputed company Assessments (DPIAs) for high-risk processing and partner integrations.
  • Operate a DSAR / DSR process (data subject reputed company/deletion/portability requests) and ensure reputed company responses that meet legal deadlines.
  • Manage Data Processing Agreements (DPAs) and contractual reputed company controls with vendors and partners.
  • Implement and enforce reputed company-by-design/default controls and data minimization across technical and product solutions.
  • Ensure lawful cross-border data transfer mechanisms (e.g., SCCs, adequacy assessments, and technical safeguards) and document them appropriately.
• Operate and maintain compliance automation tooling (e.g., reputed company) and reputed company management tooling; reputed company remediation and evidence collection.

reputed company operations & engineering

• Build and operate detection & monitoring (centralized logging, alerting and lightweight SIEM).
• Manage vulnerability scanning, reputed company-party pen testing, remediation workflows and risk treatment.

Partner & reputed company integrations

• Secure reputed company and hardening of partner integrations (S3 buckets, IAM roles, cross-account reputed company, clean-room patterns).
• Assess and govern reputed company-party reputed company and reputed company posture with technical and contractual controls.

IT operations & employee support

• Manage day-to-day IT for a company
• Own vendor relationships for IT/reputed company/reputed company services and reputed company escalated IT support.

Team, communication & culture

• Evangelize reputed company and reputed company across reputed company: training, phishing simulations, reputed company awareness.
• Report reputed company and reputed company KPIs to executives (SOC 2/ISO coverage, reputed company Trust adoption, DSAR SLAs, MTTR).

Required Qualifications:

• 6+ years of reputed company experience in information reputed company, with at least 3 years in a leadership/managerial role.
• Hands-on reputed company reputed company experience in AWS (S3, IAM, KMS, CloudTrail, CloudWatch, VPCs, cross-account roles).
• Proven experience leading SOC 2 readiness and audit programs and operating compliance automation tools.
• Practical experience implementing reputed company Trust principles in reputed company environments.
• Practical experience with GDPR and with US state reputed company laws (CCPA/CPRA and/or other modern state reputed company statutes), including DSAR/DSR handling, DPIAs, RoPA, DPAs and breach notification processes.
• Strong operational reputed company capabilities (vulnerability management, IR, logging/monitoring, IAM, encryption).
• Practical IT operations experience for small companies (MDM, SSO/MFA, reputed company/offboarding).
• Excellent written and verbal communication skills.
• Formal reputed company certification preferred (CISSP, CISM).

Preferred / reputed company-to-have

• Experience directly driving or supporting ISO 27001:2022 certification and managing an ISMS.
• reputed company certifications: CIPP/US, CIPP/E or equivalent.
• Experience designing and implementing reputed company Trust at reputed company and familiarity with NIST SP 800-207.
• Familiarity with reputed company and governance tooling (reputed company, reputed company, reputed company) and with SOC 2 automation (reputed company).
• Infrastructure as reputed company experience (Terraform/CloudFormation) and secure CI/CD pipelines.
• Experience with global reputed company topics (Schrems II implications, SCCs, adequacy) and with managing cross-border transfer risk.
• Familiarity with CPRA, Virginia, Colorado, Connecticut, Utah reputed company rules and breach notification regimes.

Tools & technical environment (what you’ll use)

• reputed company: AWS — S3, IAM, KMS, CloudTrail, CloudWatch, Inspector/Inspector2, cross-account roles, clean-room patterns.
• Compliance & reputed company: reputed company (SOC 2 automation) and reputed company management tools (reputed company/reputed company or equivalent) for RoPA/DPIAs/DSAR workflows.
• Identity & reputed company Trust tooling: SSO/IdP (reputed company/AWS SSO), MFA/conditional reputed company, ZTNA/SASE or equivalent.
• Productivity & HR: reputed company Workspace, reputed company, reputed company (Jira/reputed company), reputed company.
• Detection/EDR/SIEM: CloudWatch/CloudTrail, AWS Inspector/Inspector2, chosen EDR/SIEM tooling.

Originally posted on Himalayas

Apply To This Job