Post-secondary education in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
Experience with operational cybersecurity and compliance programs.
Knowledge of ISO/IEC 27001 and SOC 2 standards.
Proficient in audit evidence collection and validation.
GRC platform experience (preferably Vanta) is highly desirable.
Technical knowledge in identity/access management, endpoint security, and vulnerability management.
Experience in compliance-driven environments is a plus.
Responsibilities
Enforce day-to-day information security controls across multiple environments.
Monitor and maintain Kraken's ISMS, addressing control gaps and updating the risk register.
Ensure effective SOC 2 compliance through rigorous control oversight and evidence management.
Administer Kraken's GRC platform for control tracking and audit readiness.
Manage access control processes, including user lifecycle and periodic reviews.
Respond to security alerts and incidents in conjunction with external providers.
Support incident response through investigation, documentation, and corrective actions.
Benefits
Flexible remote work options for candidates across Canada and the US.
Opportunities for professional development and certifications.
Collaborative work environment focused on cybersecurity innovation.
Engagement in a proactive security culture and awareness programs.
Competitive health and wellness benefits.
Full Job Description
Kraken Robotics is currently recruiting for a Cybersecurity Specialist.
This position can be remote anywhere in Canada or US, with preference given to those candidates within the cities we have offices.
ROLES AND RESPONSIBILITES
Operate and enforce Kraken's day-to-day information security controls across corporate, cloud, and SaaS environments.
Support Kraken's ISO/IEC 27001 Information Security Management System (ISMS) by monitoring control operation, maintaining evidence, addressing control gaps, and updating risk register.
Support SOC 2 Type II compliance by ensuring security and availability controls operate effectively and are supported by accurate, auditable evidence.
Administer and maintain Kraken's GRC platform (Vanta) to support control tracking, evidence collection, remediation management, and audit activities.
Enforce access control processes, including user onboarding and offboarding, privileged access reviews, and periodic access recertification.
Monitor and respond to security alerts and incidents in coordination with managed detection and response (MDR) and SOC providers.
Support incident response activities, including investigation, documentation, corrective actions, and post-incident review.
Validate operational security controls such as logging, monitoring, vulnerability management, backup verification, and configuration compliance.
Support cybersecurity infrastructure and policy projects, including the implementation and rollout of new security tools, platforms, and control capabilities.
Enforce secure system usage and data handling requirements, escalating non-compliance and control failures as appropriate.
Support third-party security and vendor risk management activities, including review of ISO 27001 certifications, SOC 2 reports, and related assurance artifacts.
Identify gaps between documented controls and operational practice and work with internal teams to drive remediation and continuous improvement.
Provide guidance to users on secure system usage and data handling requirements in line with company policy.
Support the delivery of the organization's security awareness and phishing resistance program using KnowBe4, including administration of training campaigns, simulated phishing exercises, and post-email analysis workflows, and contributing to user remediation and reporting activities.
QUALIFICATIONS AND EXPERIENCE
Post-secondary education in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
Experience supporting operational cybersecurity, information security programs, or compliance initiatives.
Working knowledge of ISO/IEC 27001, SOC 2 Trust Services Criteria, and common operational security controls.
Experience collecting, maintaining, and validating audit-ready security evidence.
Experience working with GRC platforms (e.g., Vanta or similar) is strongly preferred.
Technical security knowledge across areas such as identity and access management, endpoint security, logging and monitoring, vulnerability management, and secure system configuration.
Experience operating in regulated, customer-assessed, or compliance-driven environments is an asset.
PREFERRED SKILLS
Strong written and verbal communication skills, with the ability to explain security requirements clearly to technical and non-technical audiences.
High attention to detail and a disciplined, evidence-driven approach to security operations.
Ability to translate security requirements into practical, enforceable operational controls.
Strong organizational and time-management skills in a multi-priority environment.
Self-motivated with a proactive mindset and a commitment to continuous improvement.
Relevant certifications (e.g., Security+, SSCP, CISSP, ISO 27001 Lead Implementer/Auditor) are considered assets.
