Job Description

Role

The Information Security Engineer supports the day-to-day operation of the company’s information security program. This role reports into the Information Security Associate Director. Works closely with cross-functional partners to help protect systems, data, and customers while building foundational experience across security operations, risk management, and compliance.

This role is ideal for someone with a strong interest in technical information security who is eager to learn, detail-oriented, and motivated to deepen their hands-on security expertise. Over time, it offers an excellent opportunity to grow into broader technical security or cyber risk responsibilities

Resposibilities

• Support the implementation and maintenance of information security policies, standards, and procedures

• Experience of monitoring tools security tools, alerts, and logs: SIEM Platforms.

• Experience of EDR tools.

• Support incident response activities, including documentation, evidence collection, and post-incident reporting

• Assist with third-party vendor security reviews and risk assessments

• Help prepare documentation and evidence for audits, customer security questionnaires, and compliance reviews

• Maintain security registers, risk logs, and control documentation

• Support employee security awareness initiatives and training programs

• Participate in continuous improvement of security processes and controls

• Produce reports for internal and external stakeholders.

Skill and Experience

• Understanding of information security principles and risk management concepts

• Familiarity with cloud environments, SaaS applications, or enterprise IT systems

• Strong attention to detail with the ability to follow defined processes and document work clearly.

• Ability to communicate effectively with technical and non-technical stakeholders

• Willingness to learn and take ownership of assigned tasks.

• Strong organizational skills and ability to manage multiple priorities

Minimum Qualifications

• Degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience

• Certifications (preferred or in progress):

• CompTIA Security+

• BCS Foundation Certificate in Cyber Security

• ISO/IEC 27001 Foundation

• NCSC-aligned training or certifications

Integrity and Ethics

• All StarCompliance employees are expected to commit to a high standard of personal integrity and carry out their responsibilities in an ethical manner