Security Lead – AWS, SaaS, GRC, Incident Response (Remote)

About the role

We are seeking an experienced Security Lead to own the organisation’s information security posture. Working directly with the CTO, you will shape security strategy, drive compliance, and act as the go‑to expert for all security matters across a cloud‑first, SaaS environment.

Key responsibilities

• Partner with technology and infrastructure leadership to strengthen security controls.
• Conduct internal audits, risk assessments and support ISO 27001 certification renewals.
• Support DLP initiatives and maintain security‑event monitoring processes.
• Lead investigations into phishing, data leakage and unauthorised access incidents.
• Collect and analyse digital evidence across enterprise platforms and security tools.
• Collaborate with HR, Legal and IT teams during investigations.
• Produce post‑incident reports and remediation recommendations.
• Manage MDM platforms and ensure endpoint compliance.
• Implement Just‑in‑Time privilege elevation and regular access reviews.
• Maintain robust audit trails for access management.

Required profile

• Several years of experience in information security, preferably in a senior role.
• Proven track record working in AWS‑based environments.
• Strong knowledge of ISO 27001, GDPR, NIST CSF and/or NIS2 frameworks.
• Experience delivering security awareness programmes and phishing simulations.
• Excellent communication skills, able to interact with staff from help‑desk to C‑suite.
• Fluent in English and Russian.

Required skills

• AWS cloud platform
• ISO 27001 compliance
• GDPR, NIST CSF, NIS2 standards
• Security Incident Response
• Digital Forensics & Evidence Collection
• Phishing investigation
• DLP solutions
• MDM management
• Just‑in‑Time privilege elevation
• SOC operations