<p><strong>Job Summary:</strong></p><p>We are seeking an experienced <strong>IT Security Engineer</strong> to help safeguard the organization’s systems, data, and infrastructure. This role is responsible for identifying security risks, leading incident response efforts, supporting audit and certification activities, and ensuring compliance with applicable legal and regulatory requirements. The ideal candidate will bring strong technical security expertise, a proactive mindset, and the ability to develop and enforce enterprise-wide security policies.</p><p><strong>Key Responsibilities:</strong></p><ul><li>Conduct security assessments, vulnerability scans, and risk analyses to identify, evaluate, and remediate potential security threats.</li><li>Monitor the organization’s security posture and recommend improvements to strengthen defenses across systems, networks, and applications.</li><li>Serve as the primary point of contact for external security audits and certification processes, including ISO certification and related compliance reviews.</li><li>Develop, implement, and maintain incident response plans, corporate security policies, standards, and procedures.</li><li>Lead security investigations, document findings, and coordinate remediation efforts following security incidents.</li><li>Conduct regular incident response testing, tabletop exercises, and reviews to ensure organizational readiness.</li><li>Ensure compliance with legal, regulatory, and industry security requirements, including CCPA, GDPR, and HIPAA.</li><li>Maintain and enforce firm-wide security policies, controls, and best practices to support compliance and risk management objectives.</li><li>Partner with internal stakeholders across IT, legal, compliance, and business teams to address security risks and improve overall governance.</li><li>Stay current on emerging threats, vulnerabilities, and regulatory changes to continuously enhance the organization’s security program.</li></ul><p><br></p>