出海雷达

Cybersecurity Specialist

开发工程限定地区（需当地身份）
公司Kraken Robotics
薪资未公开
工作地点Canada
地域资格限定地区（需当地身份）
时区要求日间重叠约 6 小时，基本正常作息
用工类型Full Time
发布时间今天
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制：该职位明确限定在 Canada 招聘。如果你是位于中国大陆的求职者，通常需要当地工作身份才能投递，或需与雇主确认是否接受独立合同（Contractor）形式合作。
关于本页中文：职位描述由本机离线模型翻译，属机器翻译，供快速判断用；正式沟通与投递请以英文原文为准。官方翻译通道恢复后会自动重译升级。

创新推动你，如果你想要在世界中改变事业，帮助人类安全，高效和可持续地克服海洋中的挑战，然后加入我们。克拉克恩机器人目前正在招聘网络安全专家。这个职位可以在加拿大或美国任何地方处于偏远位置，优先考虑那些在我们的办公室城市内的候选人。角色和责任 ·运营和执行克拉克恩公司的日常信息安全控制在环境，云和 SaaS 领域。· 通过监控控制操作，维护证据，解决控制漏洞和更新风险登记系统支持克拉肯27001信息安全管理体系 (ISMS). · 通过确保安全与可用性控制有效运行并得到准确的审核证据来支持 SOC2类型 II 合规。· 管理和维护 Kraken GRC 平台 (Vanta) 来支持控制跟踪，收集证据，修复管理和审计活动。·执行访问控制流程，包括用户上机和下机，特权访问审查以及定期获得重新认证。·与管理检测和响应 (MDR) 和 SOC 提供商协调监督并应对安全警报和事件。·支持事故响应活动，包括调查，文档化，纠正行动和事件后审查。·验证运营安全控制，如登记，监控，漏洞管理，备份核实和配置合规性。·支持网络安全基础设施和政策项目，包括实施和部署新的安全工具，平台和控制能力。·执行系统使用和数据处理要求，酌情加剧违反行为和控制故障。·支持第三方安全和供应商风险管理活动，包括审查 ISO 27001认证，SOC 2报告以及相关的保证文献。·确定记录控制与运营实践之间的差距，并与内部团队合作推动修复和持续改进。·根据公司政策提供用户关于安全系统使用和数据处理要求的指导。·支持组织对安全意识和信息化工作的实现。

查看英文原文

NEW CAREER OPPORTUNITY

Build your career with Kraken Robotics. Make a difference to others. If innovation drives you, and you want a career that makes a difference to the world, helping humanity overcome the challenges in our oceans – safely, efficiently, and sustainably – then come join us at Kraken Robotics.

Kraken Robotics is currently recruiting for a Cybersecurity Specialist.

This position can be remote anywhere in Canada or US, with preference given to those candidates within the cities we have offices.

ROLES AND RESPONSIBILITES

  • Operate and enforce Kraken’s day‑to‑day information security controls across corporate, cloud, and SaaS environments.
  • Support Kraken’s ISO/IEC 27001 Information Security Management System (ISMS) by monitoring control operation, maintaining evidence, addressing control gaps, and updating risk register.
  • Support SOC 2 Type II compliance by ensuring security and availability controls operate effectively and are supported by accurate, auditable evidence.
  • Administer and maintain Kraken’s GRC platform (Vanta) to support control tracking, evidence collection, remediation management, and audit activities.
  • Enforce access control processes, including user onboarding and offboarding, privileged access reviews, and periodic access recertification.
  • Monitor and respond to security alerts and incidents in coordination with managed detection and response (MDR) and SOC providers.
  • Support incident response activities, including investigation, documentation, corrective actions, and post‑incident review.
  • Validate operational security controls such as logging, monitoring, vulnerability management, backup verification, and configuration compliance.
  • Support cybersecurity infrastructure and policy projects, including the implementation and rollout of new security tools, platforms, and control capabilities.
  • Enforce secure system usage and data handling requirements, escalating non‑compliance and control failures as appropriate.
  • Support third‑party security and vendor risk management activities, including review of ISO 27001 certifications, SOC 2 reports, and related assurance artifacts.
  • Identify gaps between documented controls and operational practice and work with internal teams to drive remediation and continuous improvement.
  • Provide guidance to users on secure system usage and data handling requirements in line with company policy.
  • Support the delivery of the organization’s security awareness and phishing resistance program using KnowBe4, including administration of training campaigns, simulated phishing exercises, and post‑email analysis workflows, and contributing to user remediation and reporting activities.

QUALIFICATIONS AND EXPERIENCE

  • Post‑secondary education in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
  • Experience supporting operational cybersecurity, information security programs, or compliance initiatives.
  • Working knowledge of ISO/IEC 27001, SOC 2 Trust Services Criteria, and common operational security controls.
  • Experience collecting, maintaining, and validating audit‑ready security evidence.
  • Experience working with GRC platforms (e.g., Vanta or similar) is strongly preferred.
  • Technical security knowledge across areas such as identity and access management, endpoint security, logging and monitoring, vulnerability management, and secure system configuration.
  • Experience operating in regulated, customer‑assessed, or compliance‑driven environments is an asset.

PREFERRED SKILLS

  • Strong written and verbal communication skills, with the ability to explain security requirements clearly to technical and non‑technical audiences.
  • High attention to detail and a disciplined, evidence‑driven approach to security operations.
  • Ability to translate security requirements into practical, enforceable operational controls.
  • Strong organizational and time‑management skills in a multi‑priority environment.
  • Self‑motivated with a proactive mindset and a commitment to continuous improvement.
  • Relevant certifications (e.g., Security+, SSCP, CISSP, ISO 27001 Lead Implementer/Auditor) are considered assets.

Originally posted on Himalayas

本页面信息整理自 Himalayas，版权归原发布方所有。职位可能随时关闭，投递请以原始页面为准。 本站只做信息聚合展示，不参与招聘流程，也不向求职者收取任何费用。

← 返回全部职位