GRC Security Specialist / Information Security Compliance Specialist

ALLSTARSIT is a global outstaffing service provider established in 2004. We connect leading tech companies with top talent in software development for various industries, including cybersecurity, AI, healthcare, fintech, IoT, automotive, telecommunications, and media. Headquartered in San Francisco, ALLSTARSIT has development hubs in EU, MENA, APAC, and LATAM regions. The company has been consecutively awarded as the best employer by DOU for two years.

See how we work together 🎥

We're looking for a GRC Security Specialist in Ukraine for a global network security provider CATO Networks.

ABOUT THE CLIENT:

CATO Networks is the provider of the world’s first Security Access Service Edge (SASE) platform to secure all enterprise edges — sites, mobile users, and Cloud resources — with one global Cloud-native platform that relies on software instead of the current multi-protocol label switching (MPLS).

CATO optimizes and secures applications accessible to all users and locations. Using Cato, customers can easily migrate from MPLS to SD-WAN, optimize global connectivity to on premises and Cloud applications, enable secure branch internet access everywhere, and seamlessly integrate cloud data centers and mobile users into the network with a zero-trust architecture.

Specialization: Network security

Headquarters: Tel Aviv, Israel

Years on the market: 10 years

REQUIRED SKILLS:

• 2-3 years of experience in GRC, security, or compliance.
• Knowledge of ISO 27001, SOC 2, PCI DSS, CSA STAR, GDPR.
• Experience with Atlassian (Jira, Confluence), Azure, cloud platforms,
• and security tools.
• Strong communication and organizational skills.
• Ability to work cross-functionally and manage multiple projects.
• Experience with security audits and vendor risk management.

SCOPE OF WORK:

• Conduct access & privilege reviews to enforce security policies.
• Simulate phishing campaigns and summarize results.
• Conduct access & privilege reviews.
• Act as a customer-facing resource for security RFIs/RFPs.
• Handle privacy requests (deletions, regulatory inquiries).
• Implement and oversee risk-related programs with internal teams.
• Develop and maintain security policies, procedures, and controls.

If this role is a great match for you or you would like to recommend someone — apply to the vacancy here or write to our Global Recruitment Specialist on LinkedIn 🔗