From the listing
About the role
Halcyon is seeking a seasoned and collaborative Senior Information Security Specialist to support the advancement of our cybersecurity and GRC (Governance, Risk, and Compliance) programs.
In this role, you will strengthen our enterprise-wide security posture by coordinating across teams, managing third-party risk, supporting compliance initiatives, and maturing internal security processes and documentation. Responsibilities span operational security, risk assessment, policy development, and incident response preparedness.
What you'll do
- Perform and maintain third-party risk assessments and track vendor remediation activities.
- Support coordination and analysis of internal and external security testing, including vulnerability scans and penetration tests.
- Develop, track, and follow up on corrective action plans for identified security gaps or audit findings.
- Collaborate with managed security service providers and internal stakeholders to monitor and manage security events and escalations.
- Partner with engineering and operations teams to ensure implementation of security and compliance requirements across the organization.
- Assist in developing, maintaining, and communicating information security policies, standards, and procedures.
- Coordinate security incident response planning, disaster recovery testing, and business continuity exercises.
- Monitor and support enforcement of technical and administrative security controls across the enterprise.
- Stay current with evolving security and privacy regulations and frameworks (e.g., SOC 2, ISO 27001, TX-RAMP, FedRAMP).
From the company page
Benefits
The hot takeJeff's read on Halcyon
Remote policies can be VERY tricky to understand, and Halcyon is no exception. So their remote policy is as follows: "As a remote first, completely distributed team, we recognize great talent can exist anywhere. We invite you to apply to a job you’re interested in and we'll work a plan to meet your needs", however, there are many jobs with locations attached, which MAY or MAY NOT mean you are eligible to travel outside the country while working. Usually this is worked out in a case by case basis.