Security Specialist

As a Security Specialist at Kinde, you’ll work across governance, risk, compliance, and assurance. As a growing company, there’s lots to do and everyone pitches in. We know you’ll have a range of skills and experience that you can use to help us in our mission, but below are just a few of the main ones that we’re looking for:

• Demonstrated professional experience in Cyber Security Governance, Risk and Compliance (GRC), including security risk assessments, risk treatment and mitigation, compliance assessments and security governance.

• Experience developing, implementing and maintaining cyber security policies, procedures, standards and controls aligned with regulatory requirements and recognised industry practices.

• Demonstrated experience supporting or leading security audits, assurance and certification activities, particularly ISO/IEC 27001 and SOC 2.

• Strong knowledge of cyber security and risk management frameworks, including ISO/IEC 27001 and NIST Cybersecurity Framework, with the ability to translate framework requirements into practical organisational controls.

• Experience assessing security control effectiveness, identifying security and compliance gaps and coordinating appropriate remediation activities.

• Knowledge and practical experience in privacy, data protection and regulatory compliance, with the ability to translate legal and regulatory requirements into practical information security controls, policies and processes.

• Experience developing security governance documentation and providing practical cyber security guidance and awareness to technical and non-technical stakeholders.

• Strong stakeholder management and communication skills, with the ability to work collaboratively across engineering, technology, operations and business teams.

• Relevant tertiary qualifications in Cyber Security, Information Technology, Information Security, Risk Management, Data Protection, or a related discipline.