Offer summary

Qualifications:

Bachelor’s degree in Computer Science, Engineering, or related field., At least 4 years of experience as an Information Security Officer or similar role in cloud environments., Proficiency with security tools, threat detection, and monitoring technologies., Strong understanding of network architecture, operating systems, and cloud platforms..

Key responsibilities:

Develop and update security policies and procedures.

Conduct risk assessments and security audits of systems and applications.

Monitor and respond to security incidents and breaches.

Collaborate with teams to integrate security into the software development lifecycle.

Job description

Location: Colombia (Remote)

Contract Type: Fulltime Colombian Labor Contract

About Us

WebRTC.ventures is one of the few software development agencies in the world dedicated exclusively to realtime applications. Originally founded as AgilityFeat in 2010, we began specializing in WebRTC in 2015. We are headquartered in Charlottesville, VA, with a QAtesting center in Panama City, Panama, and a remote office in Bogotá, Colombia. With primary operations in North and South America, we serve clients around the globe. Our team has always been remote—something that fuels our passion for realtime communications.

The Role

We are seeking a proactive and experienced Information Security Officer to lead our security initiatives across internal systems and clientfacing, cloudbased applications. The ideal candidate has a strong background in risk assessment, incident response, and regulatory compliance (including HIPAA), and is comfortable collaborating with crossfunctional teams such as DevOps, QA, and Engineering. Experience with realtime communication technologies like WebRTC or VoIP is highly valued, as is the ability to design and implement practical security controls in fastpaced, developmentdriven environments.

Fluent English is a must! B2+ or above is required for this clientfacing role.

Key Responsibilities

Develop, implement, and regularly update security policies, procedures, and standards to align with organizational and client goals, and regulatory requirements (e.g., HIPAA, GDPR, CCPA).
Conduct regular risk assessments and security audits of internal systems, cloud environments, and active projects to identify vulnerabilities and areas for improvement.
Design and execute security processes, tests, and controls for internal and clientfacing software applications.
Monitor and respond to security incidents and breaches, coordinating investigation, mitigation, documentation, and reporting.
Manage access controls and internal user credentials, including regular reviews of permissions and segregation of duties across systems and applications.
Oversee asset management and infrastructure security, working closely with DevOps to enforce leastprivilege access and secure hardwaresoftware environments.
Collaborate with development, QA, and operations teams to integrate security into all phases of the software development lifecycle and deployment pipeline.
Provide security specifications and compliance input for client proposals and project planning, ensuring early alignment with requirements.
Ensure HIPAA compliance for all relevant platforms and guide broader data privacy compliance efforts.
Manage information security programs for both internal and client applications, including billing and database access controls.
Create and lead security awareness training programs to foster a securityconscious culture across the organization.
Conduct thirdparty vendor security assessments to evaluate risk and ensure contractual and regulatory compliance.
Maintain and optimize security tools and monitoring systems, such as firewalls, IDSIPS, and antivirus software, to ensure proactive threat detection and prevention.