4 months ago
Remote, United States or Toronto, CanadaSenior
Responsibilities
- Own and evolve the compliance program for SOC 2, ISO 27001, and other relevant frameworks.
- Drive vulnerability management from detection through remediation with engineering teams.
- Design and improve security processes and controls across infrastructure, applications, and internal systems.
- Provide security guidance for architecture and engineering decisions.
- Oversee identity and access management, endpoint security, and core IT security practices.
- Own vendor security and third-party risk assessments, evaluations, and mitigation strategies.
- Lead SOC 2 and ISO 27001 audit readiness and execution, including control design, evidence collection, and auditor coordination.
- Support customer-facing teams with security questionnaires and scalable response processes.
- Build security awareness, mentor others, and raise the organization’s security standards.
Requirements
- At least 5 years of experience in security engineering, security operations, or a related field.
- Direct experience with SOC 2 and/or ISO 27001 frameworks and audit processes.
- Deep experience with vulnerability management, tooling, prioritization, and remediation workflows.
- Experience working across AWS, GCP, or Azure and modern SaaS ecosystems.
- Experience with identity and access management, endpoint security, and IT/security operations.
- Ability to translate security risks into actionable guidance for technical and non-technical stakeholders.
- Experience or serious interest in using AI tooling to accelerate business impact.
- Strong written communication skills and comfort owning documentation and audit artifacts.
- Proactive, pragmatic approach and ability to balance security best practices with business needs.
- Experience influencing cross-functionally without authority in a remote-first environment.
- Nice-to-have experience with SIEM, logging and alerting pipelines, compliance automation platforms, SOC 2 or ISO 27001 audits, application or cloud security engineering, and mentoring junior team members.
- Must be located in one of the listed eligible countries and able to work in the Eastern North American time zone.
Benefits
- Remote-first work arrangement with eligibility in the United States, Netherlands, United Kingdom, Ireland, Estonia, Portugal, France, Sweden, Switzerland, Denmark, and Canada.
- Home office stipend, coworking budget, and ongoing education budget.
- Flexible, autonomous, and collaborative working environment.
- Annual in-person team gathering with occasional in-person collaboration.
- Mission-driven work focused on reducing wildfires and protecting natural resources.
Tech Stack
Categories
About Overstory
At Overstory, we're building AI-powered grid resilience software to support the energy transition. We combine satellites and machine learning to show utilities where they need to mitigate critical vegetation risk, helping them prevent outages, reduce threat of wildfire, and provide safer, more reliable power.