Information Security Operations Specialist (SecOps & Governance, Risk, and Compliance), Work From Home, 6 Month Contract
We are seeking a hands-on Information Security Operations Specialist to own day-to-day technical security operations and the operational maintenance of the security frameworks in Vanta. This role independently interprets Vanta tests and maintenance requirements, coordinates technical evidence and remediation, and brings practical security expertise to vulnerability management, penetration testing, and security improvements. The Information Security Operations Specialist owns program direction, governance, and audit coordination. Customer security questionnaires are transitioning to another team; this role provides technical subject-matter support and validation rather than serving as the default questionnaire owner. This is a 6 month contract opportunity. This position is 100% remote.
Information Security Operations Specialist Responsibilities
Technical security operations - 45%
- Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable.
- Coordinate penetration testing and DAST: define scope, manage providers and access, review findings, track remediation, and organize retesting.
- Triage and prioritize findings based on severity, exposure, exploitability, and business impact; drive remediation with Engineering and Infrastructure, verify closure, and escalate overdue issues.
- Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction.
- Upskill teams on vulnerability management, remediation practices, secure configuration, and security testing.
- Maintain practical security documentation, metrics, remediation records, and technical response playbooks.
GRC & Vanta Maintenance - 40%
- Maintain Vanta tests and maintenance activities across SOC 2, ISO 27001, and ISO 42001.
- Independently read and interpret Vanta tests, map technical requirements to owners and evidence, identify gaps, and coordinate timely completion.
- Collect and validate technical evidence, support control operation and testing, document exceptions and remediation, and prepare for audits and assessments.
- Partner with the Governance, Risk, and Compliance (GRC) lead to translate framework requirements into clear technical actions while the GRC lead retains ownership of the overall program.
Vendor Risk & Technical Questionnaire Support - 15%
- Lead vendor risk assessments, review SOC 2 reports and other security materials, document risks, and track follow-up actions.
- Provide technical subject-matter expertise for customer security questionnaires and due diligence requests as questionnaire ownership transitions elsewhere.
- Validate technical responses and supporting evidence for accuracy, consistency, and alignment with implemented controls.
- Support security-control mapping, vulnerability and remediation tracking, tooling alignment, identity and access reviews, and documentation of integration risks and dependencies.
Information Security Operations Specialist Qualifications:
- Hands-on experience with vulnerability management, penetration testing, security testing, remediation coordination, and technical security operations in a SaaS environment.
- Working knowledge of SOC 2, ISO 27001, and ISO 42001, with the ability to translate control requirements into technical evidence and actions.
- Hands-on experience with OWASP principles and security practices across AWS, Kubernetes, Elixir Programming Language.
- Experience using a compliance or security platform such as Vanta and independently interpreting tests, maintenance tasks, and evidence requirements.
- Ability to work effectively with Engineering and Infrastructure teams, explain security issues clearly, and upskill others without creating unnecessary process.
- Strong judgment, documentation, prioritization, and communication skills; comfortable operating independently as a contractor.
Benefits not included as this is a contract position.
Keywords: Palo Alto CA Jobs, APIs, AWS, Cloud Infrastructure, Elixir Programming Language, Engineering, GRC, Governance, Risk, and Compliance, IaC, Infrastructure as Code, Information Security Operations Specialist, Infrastructure, ISO 27001, ISO 42001, Kubernetes, OWASP, Open Worldwide Application Security Project, Penetration Testing, Remote, SaaS, Software as a Service, SecOps, SOC 2, Vanta, Vulnerability Management, Work From Home, California Recruiters, IT Jobs, California Recruiting
Looking to hire an Information Security Operations Specialist in Palo Alto, CA or in other cities? Our IT recruiting agencies and staffing companies can help.
We help companies that are looking to hire Information Security Operations Specialists for jobs in Palo Alto, California and in other cities too. Please contact our IT recruiting agencies and IT staffing companies today!
