Latch is seeking a highly motivated, experienced working in a fast-paced environment and a skilled IT Specialist to become a part of our team.

As an Information Security Specialist, you will play a crucial role in ensuring the security of our systems, networks, and data. Your responsibilities will span a range of areas, including security implementation, risk assessment, incident response, auditing and compliance, monitoring and analysis, security awareness, and documentation. You will collaborate with various teams to identify potential risks, develop mitigation strategies, and maintain a robust security posture for our organization. Your expertise will be essential in maintaining compliance with industry standards and regulations while safeguarding our critical assets.

Responsibilities:

• Configure and manage security tools, intrusion detection/prevention systems, and endpoint protection solutions.
• Administer access controls and authentication mechanisms to ensure appropriate levels of access to sensitive resources.
• Identify potential security risks and vulnerabilities through regular assessments of systems, networks, and processes.
• Develop, maintain, and regularly test an incident response plan to address security breaches and cyber incidents.
• Coordinate with IT teams to rapidly respond to and mitigate security incidents.
• Conduct post-incident analysis to refine incident response strategies.
• Collaborate with internal and external auditors to provide evidence of compliance.

Requirements:

• Desired: Relevant industry certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), CompTIA Security+.
• Strong understanding of security frameworks, standards, and best practices (e.g., NIST, ISO 27001).
• Proficiency with security tools and technologies, including Identity and access management solutions, Cloud security solutions, SIEM, and endpoint protection solutions.
• Familiarity with networking protocols and technologies.
• Knowledge of data protection regulations and compliance requirements (e.g., SOC2, PCI, SOX).
• Analytical mindset with the ability to identify and mitigate security risks.
• Strong problem-solving skills and attention to detail.
• Excellent communication skills for collaborating with diverse teams.
• Prior experience in an information security role is preferred.