Information Security Engineer - GRC & Infosec

The Information Security Engineer - GRC & Infosec at Bureau is responsible for both hands-on security engineering and governance/compliance initiatives. This role includes hardening and monitoring cloud and container infrastructure (AWS/EKS), managing vulnerability assessments, and supporting audits like ISO 27001 and SOC 2. The engineer will collaborate with cross-functional teams to implement security controls while maintaining the Information Security Management System (ISMS) and ensuring compliance with relevant data protection regulations. Strong skills in cloud security, vulnerability management, and scripting are essential.