Cybersecurity Engineer (ISO 27001 / ISMS Rep / GRC)

About the role

We are looking for a dynamic, technically‑savvy security professional to act as our Global ISMS Management Representative under ISO/IEC 27001. The role bridges governance and technical execution, ensuring that security gaps identified by auditors are closed with robust, validated solutions.

Key responsibilities

• Lead the international ISMS framework, maintain risk registers and policies, and ensure compliance with ISO 27001, SOC 1/2 and OSPAR.
• Identify technical vulnerabilities from audits or scaling activities and drive proof‑of‑concepts for tools such as SIEM, PAM and EDR.
• Manage the monitoring ecosystem, translating alerts, threat intelligence and vulnerability data into actionable defence strategies.
• Coordinate emergency response, penetration testing and vulnerability assessments.
• Collaborate with DevOps, R&D and Infrastructure teams to embed secure‑by‑design principles.
• Serve as the technical authority on security, handling client questionnaires and reviewing contract clauses.

Required profile

• Minimum 5 years of information‑security experience, balancing technical operations with governance.
• Proven experience as an ISO 27001 ISMS Management Representative and coordinating SOC 1/2 audits.
• Strong ability to interpret cloud security logs, SIEM alerts, EDR findings and vulnerability scans.
• Good understanding of cloud architectures (AWS or Alibaba Cloud) and core security domains such as IAM, encryption and network security.

Required skills

• ISO 27001, ISMS management, SOC 1, SOC 2.
• SIEM, DLP, PAM, EDR.
• Cloud platforms: AWS, Alibaba Cloud.
• Vulnerability scanning and penetration testing.
• Security certifications: CISSP, CISM, CISA, CCSP, ISO 27001 Lead Implementer/Auditor.

What we offer

• Permanent contract with a salary range of $7,000 – $8,000 per month plus benefits.