Headquarters: United States
URL: https://enveritas.org/
Do you want to work for a mission-driven non-profit, managing the cybersecurity of systems that will contribute to helping the livelihoods of millions of coffee farmers around the world? Enveritas is a 501(c)3 non-profit and Y Combinator-backed startup looking to hire an information security lead for our Engineering & Data Group. You can learn more about this job at https://www.enveritas.org/jobs/infosec/
We are looking for an experienced information security lead based out of the EU or United States with a focus on security policy and risk management to join us on a remote work, full-time basis. In this role, you will work as part of the Engineering and Data Group — a quirky, talented, and humble group of about twenty with diverse backgrounds ranging from journalism to academia to international industry.
About Our Engineering & Data Group
The Engineering & Data Group builds software to collect, analyze, and report data about coffee farmers’ conditions and practices. This large-scale data-collection effort requires many moving parts to work together, and we use technology to support that effort at every step of the process — from identifying coffee farms in satellite imagery, to coordinating survey edits across country teams, to detecting data anomalies in real-time that can be investigated while teams are still in the field. A core part of our work is in data aggregation and report generation, with insights ultimately being shared with roasters and other stakeholders on how to assist in improving the social, economic, and environmental conditions of smallholder farmers.
While our tooling varies across products, our organization primarily uses Google Workspace for collaborating, and our Engineering & Data Group uses AWS and Google Cloud for running the platforms that power our Impact, Ops, and Partnerships groups. We also use a standard assortment of SaaS platforms.
What You’ll Be Doing
You will be responsible for cybersecurity policies and practices, ensuring compliance with cybersecurity frameworks and working across teams to implement security best practices. As a dedicated security specialist, you will work closely with our IT, legal, and engineering teams to assess risks, define policies, and enhance security across the organization.
Your work will include:
- Assess and improve security policies and risk posture by reviewing audits, prioritizing key improvements, and ensuring compliance with best practices.
- Manage security configurations and access controls across Google Workspace, AWS/GCP, and SaaS vendors.
- Lead security operations and incident response, including monitoring alerts, running tabletop exercises, and implementing MDM, patch management, and Zero Trust initiatives.
- Drive security awareness and training, working with internal teams to enhance security practices, refine IAM roles, and strengthen data protection.
- Support IT operations and system security – act as a backup for our Head of IT, assisting with access management, IT troubleshooting, and ensuring secure day-to-day operations.
Source ⇲
