Bambuser

Security Engineer

• Own the ISO 27001 certification lifecycle and annual ISMS calendar
• Maintain information security Risk and Asset Registers
• Run internal and external audits from scoping through remediation
• Own the ISMS policy library and create practical policies, playbooks, and control documentation
• Drive policy adoption through clear communication and practical guidance
• Serve as the main contact for enterprise customer security reviews, RFP security sections, and the Trust Center
• Lead rollout of the RFP AI tool
• Review new tools and vendors, including AI tools, for data handling, access, and integration risks
• Track regulations across markets and translate requirements into security controls
• Support privacy compliance, vendor data handling reviews, ROPA inputs, and DPIAs
• Assess security risks associated with AI tools and maintain AI usage guidelines
• Coordinate penetration testing engagements and track remediation findings
• Own the security awareness training program, onboarding, and recurring training sessions
• Automate security workflows, evidence collection, control monitoring, training reminders, audit scheduling, and recurring tasks
• Work with Operations, Legal, Engineering, IT Ops, and commercial teams
• Report to the VP Operations

Explore Information Security Manager at Bambuser. Review requirements and application details.