[Hiring] Cybersecurity Specialist @Kraken Robotics Inc.

Role Description

• Operate and enforce Kraken’s day‑to‑day information security controls across corporate, cloud, and SaaS environments.
• Support Kraken’s ISO/IEC 27001 Information Security Management System (ISMS) by:
  • Monitoring control operation
  • Maintaining evidence
  • Addressing control gaps
  • Updating risk register
• Support SOC 2 Type II compliance by ensuring security and availability controls operate effectively and are supported by accurate, auditable evidence.
• Administer and maintain Kraken’s GRC platform (Vanta) to support:
  • Control tracking
  • Evidence collection
  • Remediation management
  • Audit activities
• Enforce access control processes, including:
  • User onboarding and offboarding
  • Privileged access reviews
  • Periodic access recertification
• Monitor and respond to security alerts and incidents in coordination with managed detection and response (MDR) and SOC providers.
• Support incident response activities, including:
  • Investigation
  • Documentation
  • Corrective actions
  • Post‑incident review
• Validate operational security controls such as:
  • Logging
  • Monitoring
  • Vulnerability management
  • Backup verification
  • Configuration compliance
• Support cybersecurity infrastructure and policy projects, including the implementation and rollout of new security tools, platforms, and control capabilities.
• Enforce secure system usage and data handling requirements, escalating non‑compliance and control failures as appropriate.
• Support third‑party security and vendor risk management activities, including:
  • Review of ISO 27001 certifications
  • SOC 2 reports
  • Related assurance artifacts
• Identify gaps between documented controls and operational practice and work with internal teams to drive remediation and continuous improvement.
• Provide guidance to users on secure system usage and data handling requirements in line with company policy.
• Support the delivery of the organization’s security awareness and phishing resistance program using KnowBe4, including:
  • Administration of training campaigns
  • Simulated phishing exercises
  • Post‑email analysis workflows
  • Contributing to user remediation and reporting activities

Qualifications

• Post‑secondary education in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Experience supporting operational cybersecurity, information security programs, or compliance initiatives.
• Working knowledge of ISO/IEC 27001, SOC 2 Trust Services Criteria, and common operational security controls.
• Experience collecting, maintaining, and validating audit‑ready security evidence.
• Experience working with GRC platforms (e.g., Vanta or similar) is strongly preferred.
• Technical security knowledge across areas such as:
  • Identity and access management
  • Endpoint security
  • Logging and monitoring
  • Vulnerability management
  • Secure system configuration
• Experience operating in regulated, customer‑assessed, or compliance‑driven environments is an asset.

Requirements

• Strong written and verbal communication skills, with the ability to explain security requirements clearly to technical and non‑technical audiences.
• High attention to detail and a disciplined, evidence‑driven approach to security operations.
• Ability to translate security requirements into practical, enforceable operational controls.
• Strong organizational and time‑management skills in a multi‑priority environment.
• Self‑motivated with a proactive mindset and a commitment to continuous improvement.
• Relevant certifications (e.g., Security+, SSCP, CISSP, ISO 27001 Lead Implementer/Auditor) are considered assets.