Information Security Officer

**About Airalo**

Alo Airalo is the world’s first eSIM store that helps people connect in over 200+ countries and regions across the globe. We are building the next digital service that revolutionizes the telecom industry. We are a travel-tech company and an equal-opportunity environment that values and executes diversity, inclusion, and equity. Our team is spread across 50+ countries and six continents. What glues us together is our commitment to changing the way you connect.

**About you**

We hope that you care deeply about the quality of your work, the intrinsic worth of tasks, and the success of your team. You are self-disciplined and do not require micromanagement in terms of your skillset and work ethic. You do your best to flourish as an individual every day while working hard to foster a collaborative team environment. You believe in the importance of being — and staying — authentic, honest, positive, and kind. You are a good interlocutor with clear and concise communication. You are able to manage multiple projects, have an analytical mind, pay keen attention to detail, and love to get your hands dirty. You are cognizant, tolerant, and welcoming of vulnerabilities and cultural differences.

**About the Role**

**Position**: Full-time / Employee

**Location**: Remote-first

**Benefits**: Health Insurance, work-from-anywhere stipend, annual wellness & learning credits, annual all-expenses-paid company retreat in a gorgeous destination & other benefits

We are looking for an experienced Information Security Officer to join our growing engineering team. We welcome talented, passionate, innovative, result-oriented professionals who are highly skilled in security policies, procedures, controls and compliance with relevant data privacy and information security laws and regulation.

**Responsibilities include but are not limited to**:

- Leading and maintaining compliance with SOC 2, ISO 27001, GDPR, CCPA and other programs.
- Developing, implementing and enforcing information security policies, procedures and guidelines to safeguard organization data.
- Conducting regular risk assessments and security audits to identify vulnerabilities and asses the effectiveness of existing security protocols.
- Developing and maintaining disaster recovery and business continuity plans.
- Completing risk assessment questionnaires for B2B and enterprise customers.
- Conducting regular risk assessment for vendors.
- Monitoring network and system activities for security incidents and responding to security breaches.
- Collaborating with engineering and other departments to integrate security measures to into all aspects of the organization.
- Staying informed about latest security trends, threads and technologies and continuously improving it.
- Improving information security in the organization by providing security awareness and other trainings to colleagues.

**Must-haves**:

- Bachelor’s degree in Computer Engineering or a similar discipline.
- 5+ years of experience in information security roles.
- Strong understanding of information security policies, practices and controls.
- Experience with SOC 2, ISO 27001, GDPR, CCPA compliance and audit processes.
- Proficiency in network security, firewalls, intrusion detection and prevention systems.
- Knowledge of data loss prevention and security information and event management systems.
- Knowledge of cloud security principles and best practices.
- Knowledge of security vendors, systems, and solutions

**Good to have**:

- Familiarity with AI tools and technologies.
- CISM, CISSP or a similar certification
- Prior work experience in telecommunications.
- Knowledge of eSIM and GSMA related technologies and services.
- We sincerely thank all applicants in advance for submitting their interest in this opportunity with Airalo._