Description review
Senior Information Security Specialist
KKCompany Technologies · Taiwan · back to the listing
HR standards
56/100
needs work
Title ↔ description
75/100
solid
Reads as
Security Engineer
89% confident
What this role officially is
ICT security administrator — ESCO, the EU occupation classification
ICT security administrators plan and carry out security measures to protect information and data from unauthorised access, deliberate attack, theft and corruption.
Also known as: network security administrator, system security administrator, ICT security administrators, IT security administrator
How others title the same work
Large employers
- Security Risk Management Specialist Canonical Ltd.
- Security Software Engineer Canonical Ltd.
- Senior Security Operations Engineer Canonical Ltd.
- Staff Security Operations Engineer Canonical Ltd.
- Ubuntu Security Engineer Canonical Ltd.
Startups
- Security Engineer (Bangalore, India) AiPrise
- Security & Trust Engineer Alex
- Elucid | Senior Security Engineer | Boston, MA | ONSITE (hybrid) | $130k–$170k Elucid
- Factory | Security Engineer | ONSITE, San Francisco, CA | Full-Time Factory
- Factory | Security Engineer | Onsite in San Francisco | Full-time Factory
What the listing never says
- 18 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
- No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency
- No location or timezone policy stated, so a candidate cannot tell where they may work from. Scope clarity
The listing, marked up
Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.
Product Segment : Corporate
Senior Information Security Specialist
We are looking for an experienced Information Security Specialist who can operate independently and keep KKCompanys rapidly scaling business aligned with ISO/IEC 27001, ISO/IEC 27701, and other relevant security and privacy requirements. You will drive internal audits, policy development, and security-awareness initiatives while collaborating with colleagues across product, operations, and compliance to embed a security-first mindset as the company grows. If you want a role that blends strategic impact with hands-on ownership of security and privacy, youll feel right at home here.
Responsibilities:
• Lead internal audits against ISO 27000-series standards, track remediation, and manage external audit schedules and evidence.
• Develop, update, and enforce information security and privacy policies, procedures, and records to meet regulatory and standard requirements.
• Monitor developments in security and privacy regulations (e.g., PDPA) and advise on control adjustments.
• Conduct annual risk assessments, maintain the risk register, and coordinate mitigation actions across teams.
• Design and deliver security and privacy awareness training and campaigns to raise organization wide security awareness.
• Collaborate with engineering, cloud operations, legal, and external consultants to ensure controls remain effective and aligned with business needs.
Requirements:
• ISO/IEC 27001:2022 Lead Auditor certification, or equivalent direct audit experience.
• Minimum 2 years of experience in information security management or security audit roles, with proven experience leading ISO 27001 internal audits.
• Practical skills in drafting and maintaining security and privacy policies and procedures aligned with recognized standards.
• Familiarity with risk assessment methodologies and experience maintaining a risk register.
• Ability to design and deliver security awareness materials or training sessions for non-technical audiences.
• Comfortable reading English standards and regulations and producing concise written documents; basic spoken English for discussions when required.
• Strong interpersonal and coordination skills to work with colleagues from different functions and with external advisors.
• Familiarity with project or issue tracking tools such as GitLab or Jira, and basic project management practices.
Nice to Have:
• Background in technology, software, or cloud service companies.
• Additional certifications such as CEH, CISA, CISM, CIPM, or ISO/IEC 27701 Lead Auditor certification.
• Excellent presentation, training, or cross cultural collaboration experience.
• Demonstrated proactivity and problem solving skills, with the ability to influence multiple teams on security matters.
Originally posted on Himalayas
Senior Information Security Specialist
We are looking for an experienced Information Security Specialist who can operate independently and keep KKCompanys rapidly scaling business aligned with ISO/IEC 27001, ISO/IEC 27701, and other relevant security and privacy requirements. You will drive internal audits, policy development, and security-awareness initiatives while collaborating with colleagues across product, operations, and compliance to embed a security-first mindset as the company grows. If you want a role that blends strategic impact with hands-on ownership of security and privacy, youll feel right at home here.
Responsibilities:
• Lead internal audits against ISO 27000-series standards, track remediation, and manage external audit schedules and evidence.
• Develop, update, and enforce information security and privacy policies, procedures, and records to meet regulatory and standard requirements.
• Monitor developments in security and privacy regulations (e.g., PDPA) and advise on control adjustments.
• Conduct annual risk assessments, maintain the risk register, and coordinate mitigation actions across teams.
• Design and deliver security and privacy awareness training and campaigns to raise organization wide security awareness.
• Collaborate with engineering, cloud operations, legal, and external consultants to ensure controls remain effective and aligned with business needs.
Requirements:
• ISO/IEC 27001:2022 Lead Auditor certification, or equivalent direct audit experience.
• Minimum 2 years of experience in information security management or security audit roles, with proven experience leading ISO 27001 internal audits.
• Practical skills in drafting and maintaining security and privacy policies and procedures aligned with recognized standards.
• Familiarity with risk assessment methodologies and experience maintaining a risk register.
• Ability to design and deliver security awareness materials or training sessions for non-technical audiences.
• Comfortable reading English standards and regulations and producing concise written documents; basic spoken English for discussions when required.
• Strong interpersonal and coordination skills to work with colleagues from different functions and with external advisors.
• Familiarity with project or issue tracking tools such as GitLab or Jira, and basic project management practices.
Nice to Have:
• Background in technology, software, or cloud service companies.
• Additional certifications such as CEH, CISA, CISM, CIPM, or ISO/IEC 27701 Lead Auditor certification.
• Excellent presentation, training, or cross cultural collaboration experience.
• Demonstrated proactivity and problem solving skills, with the ability to influence multiple teams on security matters.
Originally posted on Himalayas