Teams at Securonix

Conduct information security control self-assessments, risk assessments, vendor reviews, audits, and compliance activities across frameworks including SOC 2, ISO 27001, ISO 42001, HITRUST, and PCI. Maintain the risk register, policies, standards, procedures, audit evidence, and remediation plans in GRC systems. Collaborate with technology, security, auditors, and internal stakeholders to improve the organization’s security posture and mature its governance, risk, and compliance program.

Supports the Information Security Risk and Compliance program by conducting control self-assessments, risk assessments, vendor reviews, and audits. Coordinates audit evidence gathering, maintains the risk register and GRC documentation, develops security policies and procedures, and tracks remediation plans. The role partners with technology and security teams to improve the organization’s compliance posture against SOC 2, ISO 27001, ISO 42001, HITRUST, PCI, and related frameworks.

Lead customer-facing SIEM implementations and integrations, including data collection, secure cloud data flows, detection use cases, dashboards, connectors, and SOAR orchestration. Troubleshoot network and infrastructure issues, develop security content aligned to threat models, coordinate cross-functional delivery, gather product requirements, and train customers and partners. Requires information security and SIEM experience, scripting skills, customer communication, and familiarity with major SIEM platforms, attack frameworks, and security integrations.