- Location
- Colombo, Western Province, Sri Lanka · published
- Type
- Full-time
- Department
- Security
- Source
- Workable
Description
We are seeking an experienced Security Specialist to join Orfium’s Cloud & Infrastructure team. In this role, you will help strengthen the security of our cloud platforms, infrastructure, engineering practices, and internal systems while supporting the continued maturity of our Information Security programme.
You will work closely with Cloud & Infra, Engineering, IT Operations, Legal, and business stakeholders to drive practical security improvements across areas such as cloud security, access governance, vulnerability management, security assessments, incident response, compliance, and security awareness
Responsibilities
- Support the execution of Orfium’s cloud security strategy and roadmap by creating and supporting security controls across our cloud platforms and workloads
- Oversee IT security and data protection protocols across cloud-centric collaboration environments, ensuring secure operational continuity. .
- Architect and sustain robust information governance frameworks to optimize data integrity, classification, and secure handling.
- Ensure strict adherence to cybersecurity standards and enforce complex regulatory compliance mandates across the organization. (ISO 27001, SOC2 etc…)
- Run and support with security assessments, vulnerability reviews, penetration testing activities, and remediation follow-ups.
- Configure and administer stringent identity and access management (IAM) controls to systematically safeguard sensitive enterprise data.
- Deploy comprehensive Data Loss Prevention (DLP) strategies and proactively monitor network and endpoint activity for policy infractions.
- Support business continuity, disaster recovery, vendor security reviews, and risk assessments.
- Collaborate with IT Operations on identity, access management, admin access, onboarding/offboarding controls, and security-related tooling. (Close work with Legal Team & IT )
- Deliver or support security awareness initiatives, helping employees understand threats such as phishing, social engineering, password security, device security, and safe internet practices.
- Author and maintain detailed technical documentation encompassing security controls, operational policies, and incident response procedures.
- Stay up to date with emerging threats, security trends, and cloud security best practices, and translate them into practical improvements for Orfium.
- Support with quarterly audit reviews, audit readiness, and evidence collection.
Benefits
<p></p><p>💰 Competitive salary package and participation in our Stock Options plan</p><p>🏠 Hybrid work model with flexibility to support your lifestyle</p><p>🏥 Comprehensive private health and life insurance coverage</p><p>🌴 Extra paid time off to recharge and take care of yourself</p><p>💻 The latest tech equipment to support your productivity and creativity</p><p>🌍 A collaborative, inclusive, and international work environment</p><p></p><p><strong>About Us </strong></p><p>We are a global technology leader helping artists, songwriters, and copyright owners solve the most complex problems in the music industry through advanced rights management and data solutions. At Orfium, you’ll join a passionate, international team of developers, designers, scientists, and music lovers, all working together in a flexible, hybrid environment where innovation, openness, and ownership are at the heart of everything we do. We are looking forward to meeting with you!</p><p><br><strong>EEO / Accommodation</strong></p><p>At Orfium, we are proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and candidates—regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.</p><p></p>