Information Security Specialist

AI Digital is looking for an Information Security Specialist to take on a core operational role within our growing security team. Reporting directly to the Head of Security, you will take ownership of day-to-day execution across key operational domains—including endpoint protection, access management, vulnerability management, event monitoring, incident response, email security and employee awareness programs.

Responsibilities:

-

Monitor MDM and EDR coverage: device inventory, policy compliance, gap identification, escalation to IT Ops.

-

Triage EDR alerts: initial assessment, isolation where needed, escalation.

-

Monitor inactive and privileged accounts across Google Workspace and key SaaS platforms.

-

Track MFA coverage, maintain metrics, escalate deviations.

-

Vulnerability Management.

-

Assist with endpoint patching; notify IT Ops and DevOps on critical CVEs.

-

Monitor baseline security alerts in Google Workspace and EDR; assist with event triage, escalation by severity, and log maintenance.

-

Review phishing reports (analysis, email isolation, user notification) and manage blocking policies in Google Workspace.

-

Administer KnowBe4: training modules, phishing simulations, department-level metrics.

-

SaaS Vendor Management.

-

Support security incident handling from the security team side: escalation, timeline tracking, incident log.

-

Participate in the SOC 2 certification process.

-

Help prepare responses to security sections of questionnaires from current and prospective clients.

-

2–4 years in information security or a related field (IT, DevOps with a security focus).

-

Hands-on experience working with SaaS platforms from a security or administration perspective.

-

Understanding of core concepts: access management, vulnerability management, endpoint protection, event monitoring.

-

Experience with MDM solutions.

-

Experience with EDR.

-

Ability to take on a task without a defined process and drive it to completion.

-

Some processes will need to be built from scratch — we'll support you through that.

-

Comfortable coordinating with cross-functional teams: setting requirements, following up on execution.

Nice to have:

-

Google Workspace administration.

-

Security awareness platforms (KnowBe4 or equivalent).

-

Involvement in a SOC 2 or ISO 27001 certification process.

-

Familiarity with CIS Controls or NIST CSF.

-

Experience with process automation (scripting, API integrations, no-code/low-code tools).

What we offer:

-

USD compensation that values your expertise.

-

Work from anywhere: Fully remote to suit your lifestyle.

-

31 days of paid time off: 21 days of annual leave + 10 days of sick leave, because your health and work-life balance matter.

-

Growth-focused environment: Access to learning resources and clear pathways for growth.

-

Fun team events: Virtual cooking classes, yoga sessions, team quizzes and more.

-

A culture of trust: We cut the red tape - results over rules always. Open talk, ownership and getting things done together.