94 iso27001 jobs at 65 companies in Massachusetts

3mo
Save
Mark Applied
Hide
Cyber Threat Intelligence (CTI) Analyst
Canton, Massachusetts, United States
$84k-$119k/yr HybridFull Time
Computershare
ComputershareASX: CPU: Global provider of financial administration and shareholder management services.
2+ YOE2+ years CTI experience; knowledge of MITRE ATT&CK; professional info securityCerts; OWASP, NIST, ISO27001 familiarity
MITRE ATT&CK, Security Operations, Threat Intelligence, OWASP, NIST, ISO27001
4w
Save
Mark Applied
Hide
Information Risk Consultant
Pennsylvania or Maryland or Washington or North Carolina or Louisiana or Kentucky or Kansas or Indiana or Illinois or Georgia or Iowa or Florida or Colorado or California or Delaware or Connecticut or Arkansas or Arizona or Alabama or Alaska or Nevada or Vermont or Tennessee or Idaho or Oklahoma or Hawaii or Mississippi or Utah or New Hampshire or New Mexico or Wyoming or North Dakota or South Dakota or Rhode Island or West Virginia or Montana or Texas or District of Columbia or Ohio or New Jersey or Oregon or South Carolina or Missouri or Virginia or Massachusetts or Nebraska or Minnesota or Michigan or Wisconsin or New York or Maine
$79k-$127k/yr RemoteFull Time
Highmark Health
Highmark Health: Provides health insurance and integrated medical care services.
3+ YOEPerform information risk assessments, score and document risks, support compliance (PCI-DSS,HITRUST,ISO27001), present findings, and partner on security architecture and remediation.
ARCHER, IPS, firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), virtualization platforms, HITRUST CSF, NIST 800-83, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, ITIL 3, NIST AI RMF, ISO/IEC 42001
2mo
Save
Mark Applied
Hide
Principal Software Developer - SafeTrace
Boston, Massachusetts, United States
$104k-$176k/yr OnsiteFull Time
Haemonetics
HaemoneticsNYSE: HAE: Manufactures medical devices for blood and plasma management.
10+ YOE10+ years software engineering with 5+ years in principal/architect roles; expert C# or Java/Python; experience with REST APIs, microservices, event-driven systems, CI/CD, containerization, SQL/NoSQL, AWS and Terraform; security and compliance (OWASP, OIDC, SAML2, SOC2, ISO27001, HIPAA).
C#, Java, Python, RESTful APIs, Microservices, Domain-driven design, CI/CD, Event-driven architecture, Service-oriented architecture, High-availability, Containerization, SQL, NoSQL, Epic, AWS, ECS, EKS, RDS, Lambda, S3, SQS, CloudFormation, Terraform, OWASP, OIDC, SAML2, SOC2, ISO27001, HIPAA
1mo
Save
Mark Applied
Hide
Security Engineer
Boston, Massachusetts, United States
$90k-$140k/yr OnsiteFull Time
QuEra Computing
QuEra Computing: Develops and operates neutral-atom quantum computing systems.
4+ YOEBachelor's or equivalent experience, 4+ years in information security/systems/DevOps, cloud and networking knowledge, vulnerability management, security frameworks (SOC 2/ISO27001/NIST), strong communication.
Tenable, CrowdStrike, Qualys, Rapid7, AWS Inspector, Microsoft Purview, AWS, Azure, Oracle Cloud, Jira, SIEM, Splunk, Microsoft Sentinel, Python, PowerShell, Bash
4w
Save
Mark Applied
Hide
Network Automation Product Manager
Richmond or St. Louis or Cleveland or Philadelphia or Chicago or San Francisco or New York City or Kansas City or Boston or Atlanta or Minneapolis or Dallas
$113k-$187k/yr OnsiteFull Time
Federal Reserve System
Federal Reserve System: The central bank of the United States.
6+ YOE6+ years product/network experience; hands-on with Ansible, Terraform, Python; knowledge of routing, switching, firewalls, zero-trust, and compliance frameworks (NIST,FedRAMP,CMMC,ISO27001); strong communication and product leadership.
Ansible, Terraform, Python
2d
Save
Mark Applied
Hide
Staff DevSecOps Engineer– Medical Devices
Wilmington, Massachusetts, United States
$135k-$202k/yr OnsiteFull Time
Analog Devices
Analog DevicesNASDAQ: ADI: Designs and manufactures semiconductors for signal processing and power management.
7+ YOERequires a technical degree, 7+ years in DevSecOps or cloud security, AWS expertise, CI/CD and application security experience, healthcare compliance knowledge, and secure cloud platform experience.
AWS, SAST, DAST, SCA, SBOM, ECS, EKS, Lambda, RDS, S3, SQS, Cognito, IAM, KMS, CloudFormation, GitHub Actions, Terraform, AWS CDK, OWASP, Kubernetes, ISO 27001, SOC 2, IEC 62304, ISO 14971
1mo
Save
Mark Applied
Hide
Director of Information Security and Operations
Boston, Massachusetts, United States
OnsiteFull Time
JRNI
JRNI: Enterprise appointment scheduling and customer interaction software platform
Experienced leader in information security and cloud operations with expertise in ISO 27001 and SOC 2 compliance, AWS/GCP production infrastructure, SIEM/EDR/CSPM tooling, IAM, incident response, audits, and team leadership.
ISO 27001, SOC 2, NIST AI RMF, ISO 42001, AWS, GCP, SIEM, EDR, CSPM, SSO, MFA, SCIM, CI/CD
1mo
Save
Mark Applied
Hide
Principal, External Audit Engagement
Merrimack or Boston
$107k-$216k/yr OnsiteFull Time
Fidelity Investments
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOERequires 5+ years in IT assurance at a Big 4 or similar audit firm, cybersecurity or IT audit/risk experience, project management, and knowledge of SOC, PCI-DSS, HITRUST, Swift CSP, ISO/IEC 27000, and NIST frameworks.
AICPA, SOC 1, SOC 2, SOC 3, PCI-DSS, HITRUST, Swift CSP, ISO/IEC 27000, NIST Cybersecurity Framework
1mo
Save
Mark Applied
Hide
Senior AI Defense Engineer
Boston, Massachusetts, United States
$158k-$198k/yr HybridFull Time
WilmerHale
WilmerHale: Global law firm providing comprehensive legal representation services.
5+ YOE5+ years security/AS/ML ops experience; practical ML/AI pipeline knowledge; experience with cloud (AWS/Azure/GCP), containers/Kubernetes, secure integrations, threat modeling, adversarial testing, telemetry, and vendor AI security solutions; strong communication.
AWS, Azure, GCP, Kubernetes, CI/CD, Azure OpenAI, Model Catalog, Azure API Management, Microsoft Entra ID, Copilot, SIEM, SOAR, EDR, WAF, LangChain, Semantic Kernel, LlamaIndex, NIST AI RMF, ISO 42001, ISO 27001, SOC 2
4w
Save
Mark Applied
Hide
Cybersecurity Principal Engineer - HYBRID ROLE
Boston, Massachusetts, United States
$148k-$221k/yr HybridFull Time
Vertex Pharmaceuticals
Vertex PharmaceuticalsNASDAQ: VRTX: Develops and sells prescription drugs for serious genetic diseases.
10+ YOE10+ years cybersecurity engineering experience designing and operating enterprise security platforms; deep expertise with network, cloud, SaaS, Zero Trust, Palo Alto Networks, AWS/Azure, and regulated environments.
Palo Alto Networks, Illumio, Obsidian, Armis, AWS, Azure, NIST, ISO 27001, CIS
1d
Save
Mark Applied
Hide
Zero Trust - SASE - Infrastructure Security Consultant
Philadelphia or Milwaukee or Dallas or Columbus or Cincinnati or New York City or Cleveland or Austin or Albany or Chicago or St. Petersburg or Hartford or Pittsburgh or St. Louis or Miami or Sacramento or Raleigh or Minneapolis or Mountain View or Scottsdale or Morristown or San Francisco or Boston or Denver or Des Moines or Overland Park or Los Angeles or Charlotte or Carmel or Seattle or Houston or Arlington or Atlanta or Beaverton or Detroit or San Diego
$54k-$206k/yr FieldFull Time
Accenture
AccentureNYSE: ACN: Global provider of management consulting and technology services.
3+ YOERequires 3+ years with Prisma Access and Zscaler or Zero Trust network security, 3+ years project management and risk assessments, 2+ years technical writing, and a bachelor's degree or equivalent experience.
Prisma Access, Zscaler, Zero Trust Network Access (ZTNA), Remote Browser Isolation (RBI), ISO 27000, NIST 800 Series, COBIT, AWS, Azure, Softlayer, VMware, Microsoft 401(k)
3w
Save
Mark Applied
Hide
Senior Security, Trust & Compliance Lead
Warwick or Boston
HybridFull Time
BC Platforms
BC Platforms: Provides secure data platforms for healthcare and life sciences.
8+ YOE8+ years in security, compliance or governance; CISSP or CISM preferred; experience with ISO 27001, GDPR, SOC 2, GxP/21 CFR Part 11; cloud security, audit readiness, stakeholder engagement and strong communication.
ISO 27001, GDPR, SOC 2, GxP, 21 CFR Part 11, EHDS, EU AI Act
2w
Save
Mark Applied
Hide
Assoc Dir, Information Security Governance Risk & Compliance
Boston, Massachusetts, United States
$179k-$212k/yr HybridFull Time
Servier
Servier: Independent global pharmaceutical group developing innovative treatments for patients.
8+ YOE3+ Mgmt8+ years in information security GRC or related discipline, 3+ years leadership, expertise with risk frameworks, audit readiness, third-party risk, and strong executive communication.
NIST CSF 2.0, ISO 27001, PCI, SOX, FAIR
1mo
Save
Mark Applied
Hide
Principal, External Audit Engagement
Merrimack or Boston
$107k-$216k/yr OnsiteFull Time
Fidelity Investments
Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
5+ YOEExpertise in IT risk and cybersecurity, audited frameworks (SOC1/2/3, PCI-DSS, HITRUST, ISO27000, Swift CSP), NIST, 5+ years Big 4 IT assurance experience, bachelor’s in tech preferred, cybersecurity certifications a plus.
AICPA’s SOC 1, SOC 2, SOC 3, PCI-DSS, HITRUST, Swift CSP, ISO/IEC 27000, NIST Cybersecurity Framework
3mo
Save
Mark Applied
Hide
Chief Information Security Officer
Waltham, Massachusetts, United States
HybridFull Time
Imprivata
Imprivata: Provides digital identity and security management for healthcare organizations.
12+ YOE5+ MgmtLead global information security program; drive strategy, risk management, and compliance; oversee security architecture and team; partner with executives.
AWS, Azure, GCP, NIST, ISO 27001, SOC 2, CIS, CISSP, CISM, CISA
1mo
Save
Mark Applied
Hide
AI Security & Trust Engineering Manager
Bethesda or Richmond or Cleveland or Raleigh or Philadelphia or Boston or Atlanta or Jacksonville or Houston
$160k-$175k/yr RemoteFull Time
3E
3E: Provides software and data for chemical regulatory compliance management.
6+ YOE2+ MgmtBachelor's degree or equivalent, 6+ years technical engineering experience, 2+ years leading or mentoring engineers, deep knowledge of trust engineering/AI security, stakeholder influence, and strong communication skills.
SOC 2, ISO 27001, ISO 42001
1w
Save
Mark Applied
Hide
Senior Director, Chief Information Security Officer
Cambridge, Massachusetts, United States
$245k-$325k/yr OnsiteFull Time
Scholar Rock
Scholar RockNASDAQ: SRRK: Develops monoclonal antibodies for serious neuromuscular and metabolic diseases.
12+ YOEBachelor's degree and 12+ years of progressive cybersecurity experience required, including enterprise program leadership, regulated environments, governance, risk, compliance, vendor management, executive communication, and CISSP certification.
NIST Cybersecurity Framework, Computer System Validation, Quality Management Systems, SOX, CISSP, CISM, CRISC, CCSP, GIAC, CISA, ISO 27001
1w
Save
Mark Applied
Hide
Senior End User Experience Manager
Madrid or Lausanne or Boston
HybridFull Time
Nexthink
Nexthink: Provides software to manage and optimize digital employee experiences.
5+ MgmtRequires 5+ years of people management, scaled IT end-user support experience, automation and AI support tooling experience, ITIL certification, university degree, Spanish fluency, and professional English.
Spark, ITSM, Nexthink, ISO 27001, SOC 2 Type II, SLAs, KPIs
6d
Save
Mark Applied
Hide
Manager, Security Governance & Risk
Boston, Massachusetts, United States
HybridFull Time
Emburse
Emburse: Provides AI-powered travel and expense management software for businesses.
7+ YOE2+ MgmtBachelor's degree and 7+ years in information security, risk, or compliance, including 2+ years managing people. Requires GRC, risk, audit, metrics, privacy, AI governance, and compliance platform experience.
Drata, Vanta, NIST, ISO 27001, ISO 27701, PCI DSS, SOC 1, SOC 2, NIST AI RMF, ISO/IEC 42001, EU AI Act, Tx-RAMP, GDPR, PIPEDA, CCPA, CPRA, SOX
1mo
Save
Mark Applied
Hide
Principal Engineer, Security
Boston, Massachusetts, United States
$244k-$366k/yr OnsiteFull Time
Klaviyo
KlaviyoNYSE: KVYO: Software platform for automated e-commerce marketing and customer data.
10+ YOE10+ years infrastructure/platform security experience; deep cloud security (AWS/GCP IAM, mTLS), secrets management, IaC and CI/CD controls, vulnerability and SLO-driven remediation, threat modeling, and experience with compliance frameworks.
AWS, GCP, mTLS, IaC, CI/CD, SOC 2, ISO 27001, GDPR, AI