IT Security Specialist - Remote

Overview

We’re looking for someone great to lead critical work in Security & Compliance! Your primary task is to strengthen our security processes and keep our agency and our clients safe. You will take extreme amounts of initiative and enthusiasm to get things done. To do this, you should have a natural curiosity to research, experiment and reach out to the right people.

In Short

• Implementing, monitoring, and maintaining endpoint and network security tools (CrowdStrike, MFA, SSO, VPNs, password managers, etc.)
• Managing user access controls and enforcing security policies across all devices (including BYOD).
• Conducting vulnerability assessments and coordinating incident response.
• Reviewing and hardening security configurations for web servers, cloud environments, and third-party integrations.
• Supporting compliance efforts for ISO 27001, GDPR, SOC 2, and similar frameworks.
• Creating and maintaining security documentation (policies, procedures, incident response plans).
• Monitoring system logs and alerts for suspicious activity and responding to events.
• Running employee security awareness training and phishing simulations.
• Collaborating with Development and DevOps to ensure secure coding and deployment practices.
• Coordinating with clients and vendors on security questionnaires, audits, and compliance requirements.

Requirements

• 2+ years in Endpoint Security Management, particularly for web agencies with a remote, BYOD policy.
• Strong written and verbal communication skills (you may be asked to complete a live email task during the interview).
• High persistence and follow-through to ensure people comply with security processes.
• Ability to clarify vague requests, ask smart questions, and structure security recommendations clearly.
• Strong analytical and reasoning ability.

Benefits

• Cutting-edge work in a fast-growing CRO environment where security is mission-critical.
• Permanently remote work environment.
• Full-time position with semi-flexible hours — must overlap 4 hours with EST (8 AM–12 NN ET).
• Technology reimbursement (hardware and software support).
• Company-sponsored training and security certifications.
• 20 days of paid vacation plus holidays.
• Competitive salary.