Information Security Engineer

About this role

Information Security Engineer

AboutBitwerx

Bitwerx, Inc. is a team of industry experts focused on designing, building, and supporting innovative software solutions that leverage data to improve the customer journey. Our experience spans many industries with a focus on veterinary, and our partners range from startups trying to bring a new idea to market to Fortune 500 companies looking to become more agile.

About the role

We are seeking an Information Security Engineer to serve as the primary owner of Bitwerx’s Information Security governance, policies, and compliance framework, leading the design, implementation, and ongoing maturation of the security program with a core focus on SOC 2 Type 2 and broader U.S. and international compliance requirements.

This is a hands-on individual contributor role. You will be responsible for building practical, scalable security controls; refining policies and standards; operationalizing compliance requirements; and partnering closely with our Platform Delivery and Software Engineering teams to embed security into day-to-day operations.

This role may be based in Lexington, KY (hybrid) or performed remotely from select U.S. locations.

WhatYou’llDo

Security & Compliance Program Ownership

• Own end-to-end SOC 2 Type 2 execution

• Design, refine, and validate security controls

• Prepare audit evidence and remediation plans

Policy, Risk and Governance

• Author and maintain security policies and standards

• Maintain the risk register and treatment plans

• Manage vendor risk workflows

Cloud and Platform Security

• Implement Azure security guardrails

• Enforce IAM, RBAC, MFA and conditional access

• Maintain the risk register and treatment plans

• Secure CI/CD pipelines and secrets

Monitoring and Incident Response

• Implement centralized logging and alerting

• Maintain Incident Response playbooks and lead response efforts

• Perform root caus...