Information Security & Compliance Manager (all genders)

📋 Description

• Own our ISMS end-to-end — scope, policies, controls, risk register, management review and
• Lead our re-certification in early 2027: close nonconformities, plan and run internal audits
• Define and build ISMS processes tailored to fiskaly — business continuity, change management
• Run the company-wide risk management programme, translating abstract risks into prioritised
• Be the independent expert voice towards management: report on the state of security and compliance
• Partner with Engineering and Product to embed security-by-design into the SDLC, CI/CD and

🎯 Requirements

• 5+ years in Information Security, Compliance or Risk Management, with a track record of building or
• Owned at least one ISO 27001 certification, surveillance or re-certification audit end-to-end
• Deep knowledge of ISO 27001 (2022) and its controls; working knowledge of ISO 9001 and GDPR; able
• Genuine fluency in SaaS and cloud environments: GCP and/or Azure, CI/CD, infrastructure-as-code and
• Solid understanding of secure SDLC
• Strong risk management foundations (ISO 31000, COSO or comparable)

🎁 Benefits

• A real ownership mandate: shape how security, quality and compliance work at scale
• A highly collaborative and international team that values trust, growth, and transparency
• Competitive salary and benefits package
• Hybrid setup with a modern office in Vienna, modern tools, and a strong culture of autonomy
• Time and budget for continuous learning and certifications