Information Security & Cloud Operations Specialist

We are seeking a hands-on technical professional with a strong security mindset, practical experience in AWS cloud environments, and a high level of ownership. This role will be responsible for day-to-day security operations across North American systems, maintaining the U.S. data environment, and managing access controls to support the company’s data compliance obligations and business growth in the United States.

Initially, the role will focus on cloud infrastructure and IT operations, implementation of security controls, and audit support. As the business grows, the position will gradually evolve into a local information security leadership role, driving the development of security policies and serving as a key security point of contact for management, business teams, and external auditors.

• Security Operations for North American Systems
• Maintain an inventory of systems, cloud resources, endpoint devices, and software assets.
• Conduct security configuration reviews, vulnerability scans, patch management, and remediation tracking.
• Monitor unusual access patterns and security alerts; participate in security incident investigation, response, and post-incident reviews.
• AWS Data Environment & Infrastructure Operations
• Maintain the U.S. AWS environment, including data ingestion, storage, compute resources, and related services, ensuring system stability and availability.
• Handle routine configuration, troubleshooting, backup and recovery, monitoring and alerting, and optimization of capacity and cloud costs as needed.
• Data Access Approval & Access Control Management
• Within the scope of delegated authority, take substantive responsibility for security reviews of system and data access requests, including approving or denying requests, configuring permissions, and conducting periodic access reviews.
• Enforce the principle of least privilege, multi-factor authentication (MFA), segregation of duties, and access management throughout employee onboarding, internal transfers, and offboarding.
• Perform additional reviews for privileged access, sensitive data access, and exceptions to standard access policies, ensuring that approval decisions and related actions are fully traceable.
• Data Compliance & Audit Support
• Work with Legal, Compliance, and external auditors to implement applicable U.S. state-level data security requirements.
• Prepare and maintain audit evidence, including asset inventories, data flows, access records, system activity logs, and remediation documentation.
• Support the implementation and verification of corrective actions arising from audits or compliance reviews.
• Cloud-Based AI Agent Operations Support
• Support the deployment, operational monitoring, and troubleshooting of AI agents within the U.S. cloud environment for data tagging, report generation, and operational assistance.
• Manage service accounts, credentials, and tool invocation permissions.
• Implement security controls and logging for data access, model service calls, and output generation.
• Corporate IT & Hardware/Software Support
• Provide essential IT support for the U.S. team, including user accounts, business software, endpoint devices, and basic network operations.
• Coordinate with vendors on device configuration, hardware repairs, and service issues to ensure business continuity.
• Security Policy Development & Cross-Functional Collaboration

Establish and maintain operational standards for access control, change management, log retention, incident response, and routine IT operations.

Report key security risks and remediation progress to management.

Provide security guidance to business teams and support security questionnaires and assessments from customers and business partners.

• Relevant
  
  Experience:
  
  1-3 years of experience in enterprise IT, cloud operations, information security, or a related field, with hands-on experience independently maintaining production environments. Candidates with experience in security management, audit coordination, or security policy development may be considered for a higher-level position.
• AWS Hands-on
  
  Experience:
  
  Practical knowledge of AWS data storage, identity and access management, logging, monitoring, and basic cloud operations. Experience using services such as IAM, S3, Cloud Trail, and Cloud Watch to perform operational tasks is required, along with a foundational understanding of networking, encryption, backup, and recovery.
• Security Controls Implementation:
  Understanding of least privilege, role-based access…