5 months ago
Remote, United States or Toronto, CanadaSenior
Responsibilities
- Own and evolve the compliance program for SOC 2, ISO 27001, and other relevant frameworks.
- Drive vulnerability management from detection through remediation with engineering teams.
- Design and improve security processes and controls across infrastructure, applications, and internal systems.
- Provide security guidance for architecture and engineering decisions.
- Oversee identity and access management, endpoint security, and core IT security practices.
- Own vendor security and third-party risk assessments, evaluations, and mitigation strategies.
- Lead SOC 2 and ISO 27001 audit readiness and execution, including control design, evidence collection, and auditor coordination.
- Support customer-facing teams with security questionnaires and scalable response processes.
- Build security awareness, mentor others, and raise the organization’s security standards.
Requirements
- At least 5 years of experience in security engineering, security operations, or a related field.
- Direct experience with SOC 2 and/or ISO 27001 frameworks and audit processes.
- Deep experience with vulnerability management, tooling, prioritization, and remediation workflows.
- Experience working across AWS, GCP, or Azure and modern SaaS ecosystems.
- Experience with identity and access management, endpoint security, and IT/security operations.
- Ability to translate security risks into actionable guidance for technical and non-technical stakeholders.
- Experience or serious interest in using AI tooling to accelerate business impact.
- Strong written communication skills and comfort owning documentation and audit artifacts.
- Proactive, pragmatic approach and ability to balance security best practices with business needs.
- Experience influencing cross-functionally without authority in a remote-first environment.
- Nice-to-have experience with SIEM, logging and alerting pipelines, compliance automation platforms, SOC 2 or ISO 27001 audits, application or cloud security engineering, and mentoring junior team members.
- Must be located in one of the listed eligible countries and able to work in the Eastern North American time zone.
Benefits
- Remote-first work arrangement with eligibility in the United States, Netherlands, United Kingdom, Ireland, Estonia, Portugal, France, Sweden, Switzerland, Denmark, and Canada.
- Home office stipend, coworking budget, and ongoing education budget.
- Flexible, autonomous, and collaborative working environment.
- Annual in-person team gathering with occasional in-person collaboration.
- Mission-driven work focused on reducing wildfires and protecting natural resources.
Tech Stack
Categories
About Overstory
Overstory builds AI-powered vegetation management and grid resilience software for electric utilities, combining satellite imagery and machine learning to identify and prioritize vegetation risks. It sells its platform and analytics on a subscription and services basis to utilities and grid operators to reduce outages and wildfire risk. Founded in 2018 and headquartered in Somerville, Massachusetts, the company is privately held.