Senior Information Security Specialist
Halcyon · Remote, US
About this role
**Senior Information Security Specialist** **About Halcyon:** Halcyon is the industry's first dedicated, adaptive security platform combining multiple proprietary advanced prevention engines with AI models focused on stopping ransomware. Founded in 2021 by cyber industry veterans from Cylance, Accuvant, FireEye, and ISS X-Force, we're a remote-native, globally distributed team. **The Role:** We're seeking a seasoned Senior Information Security Specialist to support advancement of our cybersecurity and GRC programs. You'll strengthen our enterprise-wide security posture by coordinating across teams, managing third-party risk, supporting compliance initiatives, and maturing internal security processes. **Key Responsibilities:** • Perform and maintain third-party risk assessments and track vendor remediation • Support coordination of internal and external security testing (vulnerability scans, penetration tests) • Develop and track corrective action plans for security gaps and audit findings • Collaborate with MSSPs and stakeholders on security event monitoring and escalations • Partner with engineering and operations teams on security and compliance implementation • Develop and maintain information security policies, standards, and procedures • Coordinate incident response planning, disaster recovery testing, and business continuity exercises • Monitor and enforce technical and administrative security controls • Stay current with evolving regulations (SOC 2, ISO 27001, TX-RAMP, FedRAMP) **Required Qualifications:** • 5+ years in information security, GRC, or IT risk management • Strong understanding of cybersecurity concepts, controls, and risk frameworks • Experience with third-party risk management processes and tooling • Proven ability to coordinate security testing and vulnerability management • Excellent communication, documentation, and cross-functional collaboration skills • Ability to assess and implement controls across cloud and hybrid environments • Experience with regulatory compliance and audit support **Bonus Skills:** • Compliance platforms (Drata, Vanta) • NIST 800-53, CIS Controls, or similar frameworks • DevSecOps or secure software development practices • Third-party security assessment experience • Microsoft 365 and/or Google Workspace security configuration • HIPAA, GDPR, or CCPA exposure • Certifications: CISSP, CISA, CISM, Security+, or similar **Benefits:** • Comprehensive healthcare (medical, dental, vision) with full premium coverage • Short and long-term disability, life and AD&D insurance • Medical and dependent care FSA options • 401k with generous employer contribution • Flexible PTO policy • Parental leave **Remote-friendly:** We're a distributed global team and welcome talent from anywhere.
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.