# Information Security Engineer

**Company:** [Q4 Inc](https://hotfix.jobs/companies/q4-inc)
**Location:** Unspecified
**Role:** Security Engineering
**Experience:** 2+ years
**Skills:** Information Security, ISO 27001, SOC 2, GDPR, Dpia, Vulnerability Management, Penetration Testing, Security Compliance, Internal Audits, Vanta, Drata, Secureframe
**Posted:** 2026-09-05

> The Information Security Engineer manages security compliance programs, audit readiness, client due diligence, and security questionnaires. The role requires 2+ years of experience with SOC 2, ISO 27001, data privacy frameworks, and compliance tooling.

## Job Description

## Responsibilities
- Respond to client security questionnaires and due diligence requests.
- Update security policies and documentation.
- Manage and optimize ISO 27001, SOC 2, and DPIA compliance frameworks.
- Partner with internal audit teams, external certification bodies, and penetration testing providers.
- Translate technical security constraints, data, and compliance requirements into actionable strategies and audit evidence.
- Drive continuous operational excellence and maintain audit readiness.

## Requirements
- 2–5 years of professional experience in information security compliance.
- Proven experience navigating multiple audit programs, particularly SOC 2.
- Strong knowledge of ISO 27001, SOC 2, and data privacy frameworks, including GDPR and DPIA.
- 2–5 years of experience managing compliance programs, leading internal audits, and responding to customer security questionnaires.
- Advanced experience with vulnerability management tracking tools, penetration testing remediation systems, and compliance management platforms.
- Exceptional communication skills, including the ability to explain security controls, ROI, and compliance documentation to clients, enterprise stakeholders, and auditors.

## Nice to Have
- ISO 27001 Lead Auditor or Lead Implementer certification.
- Experience with automated compliance tools such as Vanta, Drata, or Secureframe.

## Similar jobs

- [Security Engineer](https://hotfix.jobs/jobs/bbe1f814-ebd5-4772-ae45-046d0bee5adf) - Starburst
- [Platform Security Engineer](https://hotfix.jobs/jobs/e556dd76-0f95-4dfa-9d3d-e476f24057c0) - Supabase - Remote
- [Manager, Security Operations](https://hotfix.jobs/jobs/0a4637da-6072-4ec3-a0a9-8b6d4a412d45) - Vanta - Remote - $178k – $209k/yr
- [Supply Chain Security Engineer](https://hotfix.jobs/jobs/7ea430fb-72cd-43f4-9700-2698a4cc949f) - Glean - Bengaluru, India
- [Specialist, CSIRT](https://hotfix.jobs/jobs/d5cdd102-2c55-4adf-a397-fb50362f7fea) - Coinbase - Remote

**Apply:** https://hotfix.jobs/jobs/427d1625-16a6-4994-817d-d0966de9c1d1
**Canonical:** https://hotfix.jobs/jobs/427d1625-16a6-4994-817d-d0966de9c1d1