90 iso27001 jobs at 62 companies in Boston, MA

3mo
Save
Mark Applied
Hide
Cyber Threat Intelligence (CTI) Analyst
Canton, Massachusetts, United States
$84k-$119k/yr HybridFull Time
Computershare
ComputershareASX: CPU: Global provider of financial administration and shareholder management services.
2+ YOE2+ years CTI experience; knowledge of MITRE ATT&CK; professional info securityCerts; OWASP, NIST, ISO27001 familiarity
MITRE ATT&CK, Security Operations, Threat Intelligence, OWASP, NIST, ISO27001
2mo
Save
Mark Applied
Hide
Principal Software Developer - SafeTrace
Boston, Massachusetts, United States
$104k-$176k/yr OnsiteFull Time
Haemonetics
HaemoneticsNYSE: HAE: Manufactures medical devices for blood and plasma management.
10+ YOE10+ years software engineering with 5+ years in principal/architect roles; expert C# or Java/Python; experience with REST APIs, microservices, event-driven systems, CI/CD, containerization, SQL/NoSQL, AWS and Terraform; security and compliance (OWASP, OIDC, SAML2, SOC2, ISO27001, HIPAA).
C#, Java, Python, RESTful APIs, Microservices, Domain-driven design, CI/CD, Event-driven architecture, Service-oriented architecture, High-availability, Containerization, SQL, NoSQL, Epic, AWS, ECS, EKS, RDS, Lambda, S3, SQS, CloudFormation, Terraform, OWASP, OIDC, SAML2, SOC2, ISO27001, HIPAA
1mo
Save
Mark Applied
Hide
Security Engineer
Boston, Massachusetts, United States
$90k-$140k/yr OnsiteFull Time
QuEra Computing
QuEra Computing: Develops and operates neutral-atom quantum computing systems.
4+ YOEBachelor's or equivalent experience, 4+ years in information security/systems/DevOps, cloud and networking knowledge, vulnerability management, security frameworks (SOC 2/ISO27001/NIST), strong communication.
Tenable, CrowdStrike, Qualys, Rapid7, AWS Inspector, Microsoft Purview, AWS, Azure, Oracle Cloud, Jira, SIEM, Splunk, Microsoft Sentinel, Python, PowerShell, Bash
4w
Save
Mark Applied
Hide
Network Automation Product Manager
Richmond or St. Louis or Cleveland or Philadelphia or Chicago or San Francisco or New York City or Kansas City or Boston or Atlanta or Minneapolis or Dallas
$113k-$187k/yr OnsiteFull Time
Federal Reserve System
Federal Reserve System: The central bank of the United States.
6+ YOE6+ years product/network experience; hands-on with Ansible, Terraform, Python; knowledge of routing, switching, firewalls, zero-trust, and compliance frameworks (NIST,FedRAMP,CMMC,ISO27001); strong communication and product leadership.
Ansible, Terraform, Python
3w
Save
Mark Applied
Hide
Security Architect
Boston, Massachusetts, United States
$155k-$195k/yr OnsiteFull Time
WHOOP
WHOOP: Wearable technology for personalized health and performance tracking.
8+ YOE8+ years in security architecture or senior security engineering, experience with cloud-native security (AWS), application and infrastructure security, threat modeling, and regulatory frameworks; strong communication and mentoring skills.
AWS, HIPAA, PCI DSS, ISO 27001, SOC 2, NIST 800-53, CISSP, CCSP, AWS Certified Security – Specialty, GIAC, TOGAF
1mo
Save
Mark Applied
Hide
Sr. Director, Governance, Risk & Compliance
United States or Cambridge
$230k-$311k/yr HybridFull Time
Alnylam Pharmaceuticals
Alnylam PharmaceuticalsNASDAQ: ALNY: Develops RNAi therapeutics to treat rare and common diseases.
15+ YOE10+ Mgmt15+ years in cybersecurity/risk/compliance, 10+ years leading GRC teams; Bachelor’s in a relevant field required; strong knowledge of NIST, ISO, ERM; CISSP/CISM/CRISC/CISA preferred.
NIST CSF v2.0, NIST 800-53, ISO 27001, ERM, GxP, HIPAA, SOX, FDA, Computer System Validation (CSV), NIS2, IT SDLC
1mo
Save
Mark Applied
Hide
Principal Engineer, Security
Boston, Massachusetts, United States
$244k-$366k/yr OnsiteFull Time
Klaviyo
KlaviyoNYSE: KVYO: Software platform for automated e-commerce marketing and customer data.
10+ YOE10+ years infrastructure/platform security experience; deep cloud security (AWS/GCP IAM, mTLS), secrets management, IaC and CI/CD controls, vulnerability and SLO-driven remediation, threat modeling, and experience with compliance frameworks.
AWS, GCP, mTLS, IaC, CI/CD, SOC 2, ISO 27001, GDPR, AI
1mo
Save
Mark Applied
Hide
Principal, External Audit Engagement
Merrimack or Boston
$107k-$216k/yr OnsiteFull Time
Fidelity Investments
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOEExpertise in IT risk and cybersecurity, audited frameworks (SOC1/2/3, PCI-DSS, HITRUST, ISO27000, Swift CSP), NIST, 5+ years Big 4 IT assurance experience, bachelor’s in tech preferred, cybersecurity certifications a plus.
AICPA’s SOC 1, SOC 2, SOC 3, PCI-DSS, HITRUST, Swift CSP, ISO/IEC 27000, NIST Cybersecurity Framework
1w
Save
Mark Applied
Hide
Head of Cryptography, MD
Quincy or Berwyn or Princeton or Clifton or Austin
$175k-$288k/yr OnsiteFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
15+ YOE15+ years in cybersecurity, cryptography, security engineering, or infrastructure security leadership; enterprise cryptography experience; expertise in PKI, key management, HSMs, cloud security, and post-quantum strategy.
Kubernetes, FFIEC, NIST, ISO 27001, PCI DSS, NYDFS, GDPR, SEC, PKI, HSM, KMS, APIs, CISSP, CCSP, CISM, GCFA
1mo
Save
Mark Applied
Hide
Governance, Risk and Compliance Analyst
Reston or Somerville
$80k-$125k/yr HybridFull Time
Babel Street
Babel Street: AI-powered identity intelligence and risk operations software solutions.
3+ YOEBachelor's degree or equivalent, 3+ years GRC/InfoSec experience, knowledge of NIST CSF, CMMC, Cyber Essentials Plus, SOC 2, ISO/IEC 27001, audit support and risk assessment skills.
NIST Cybersecurity Framework (NIST CSF), CMMC, Cyber Essentials Plus, ISO/IEC 27001, SOC 2
1mo
Save
Mark Applied
Hide
IT Operations & Security Manager
Boston, Massachusetts, United States
$110k-$135k/yr HybridFull Time
envelio
envelio: Software to help utilities digitize and automate power grids.
4+ YOE4+ years in information security or IT operations, SOC 2/ISO 27001 experience, MDM and identity management experience, Microsoft 365/Entra ID/Intune administration, strong communication and process-building skills.
SOC 2, ISO 27001, Mobile Device Management (MDM), Microsoft 365, Microsoft Entra ID (Azure AD), Microsoft Intune
1mo
Save
Mark Applied
Hide
Senior AI Defense Engineer
Boston, Massachusetts, United States
$158k-$198k/yr HybridFull Time
WilmerHale
WilmerHale: Global law firm providing comprehensive legal representation services.
5+ YOE5+ years security/AS/ML ops experience; practical ML/AI pipeline knowledge; experience with cloud (AWS/Azure/GCP), containers/Kubernetes, secure integrations, threat modeling, adversarial testing, telemetry, and vendor AI security solutions; strong communication.
AWS, Azure, GCP, Kubernetes, CI/CD, Azure OpenAI, Model Catalog, Azure API Management, Microsoft Entra ID, Copilot, SIEM, SOAR, EDR, WAF, LangChain, Semantic Kernel, LlamaIndex, NIST AI RMF, ISO 42001, ISO 27001, SOC 2
2w
Save
Mark Applied
Hide
Identity and Access Management (IAM) Senior Consultant
Washington or Denver or Boston
$140k-$200k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
10+ YOE10+ years in IAM, information security, cloud or related disciplines in large regulated organizations; deep IAM and public cloud knowledge; experience with AI identity risks, vendor assessments, and executive communication.
AWS, Microsoft Azure, Google Cloud Platform, NIST, COBIT, ISO 27001, MITRE ATLAS, OWASP
2mo
Save
Mark Applied
Hide
Information Security Lead
Waltham, Massachusetts, United States
$150k-$200k/yr RemoteFull Time
Alloy Therapeutics
Alloy Therapeutics: Providing drug discovery technologies and services to scientific partners.
Build and run an information security program including incident response, vulnerability and patch management, IAM and endpoint hardening, data protection for large-scale research, compliance (SOC 2/ISO), and governance.
Google Workspace, AWS, GCP, Azure, IAM, MFA, FIDO2, YubiKey, SSO, SCIM, EDR, CVE, CSIRT, SOC 2 Type 2, ISO 27001
2w
Save
Mark Applied
Hide
Senior Security, Trust & Compliance Lead
Warwick or Boston
HybridFull Time
BC Platforms
BC Platforms: Provides secure data platforms for healthcare and life sciences.
8+ YOE8+ years in security, compliance or governance; CISSP or CISM preferred; experience with ISO 27001, GDPR, SOC 2, GxP/21 CFR Part 11; cloud security, audit readiness, stakeholder engagement and strong communication.
ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11, EHDS, EU AI Act
1w
Save
Mark Applied
Hide
Senior Security Engineering Manager
Chicago or Quincy or Salisbury
$151k-$227k/yr HybridFull Time
Ahold Delhaize USA
Ahold Delhaize USAEuronext Amsterdam: AD: Operates a portfolio of omnichannel grocery brands.
10+ YOE3+ MgmtRequires 10+ years in technology, 3+ years managing or developing teams, a bachelor's degree, cybersecurity and incident response expertise, security framework knowledge, analytical and communication skills, and 25% travel.
Security Operations Center (SOC), Security Information and Event Management (SIEM), NIST, ISO/IEC 27001, MITRE ATT&CK, CIS Controls
5d
Save
Mark Applied
Hide
Manager, IT Compliance & Vendor Management
United States or Canada or Fort Collins or New York City or Framingham
$120k-$175k/yr RemoteFull Time
Landline
Landline: Providing seamless ground transportation connections for airline networks.
5+ YOERequires 5+ years in IT compliance, information security, audit, or governance, including 2+ years owning a control or audit program; framework, GRC platform, MSP oversight, and core IT control experience required.
NIST Cybersecurity Framework (NIST CSF), Vanta, NIST 800-53, ISO 27001, SOC 2, CIS Controls, Drata, Secureframe, LogicGate, AuditBoard, ServiceNow GRC, CISA, CRISC, CISM, CISSP, PCI DSS, CCPA, CPRA, ITIL
2d
Save
Mark Applied
Hide
Security Architect
Newton, Massachusetts, United States
$175k-$200k/yr HybridFull Time
Informa
InformaLondon Stock Exchange: INF: Organizing international business events and publishing academic research journals
7+ YOEBachelor’s or master’s degree in computer science, information technology, or related field; 7+ years of cybersecurity experience; deep cloud security expertise; multi-cloud architecture leadership; strong analytical and communication skills.
AWS, GCP, Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), Wiz, Identity and Access Management (IAM), Security Information and Event Management (SIEM), CI/CD, OWASP, Docker, Kubernetes, Trivy, Aqua Security, Unix, NIST, COBIT, ISO 27001, SOC 2, GDPR, SOX
1d
Save
Mark Applied
Hide
LV1 ITAD Operator
Garland or Charlotte or Sacramento or Boston
OnsiteFull Time
Sprout
Sprout: Provider of secure IT asset disposition and electronics recycling.
Warehouse experience required; prior ITAD preferred. Requires English proficiency, 40 WPM typing, basic arithmetic, hand-tool experience, safety compliance, and ability to perform repetitive standing work.
R2v3, ISO 27001
1w
Save
Mark Applied
Hide
Head of Regulatory
San Mateo or New York City or Boston or Salt Lake City
HybridFull Time
Overjet
Overjet: AI platform for dental diagnostics and practice management.
7+ YOERequires 7+ years in medical device regulatory affairs, 2+ years with FDA software as a medical device, global submissions experience, regulatory framework expertise, and a scientific or engineering bachelor's degree.
FDA 510(k), De Novo, Health Canada Medical Device License (MDL), EU MDR, UK MHRA, Australian TGA, 21 CFR Part 820, Software as a Medical Device (SaMD), ISO 13485, ISO 14971, IEC 62304, ISO 27001, HIPAA, GDPR