Security and Compliance Manager

📋 Description

• Run security compliance program day to day: own audit calendar, keep control framework current
• Coordinate internal and external audits (SOC 1, SOC 2 Type II, ISO 27001:2022, customer-driven
• Operate corporate risk management program: maintain risk register, facilitate periodic risk
• Maintain ISMS policy and standards library: author and revise core policies, coordinate scheduled
• Review security terms in customer contracts, security schedules and addenda with Legal.
• Manage RFx and customer security questionnaire process: operate workflow, direct specialists and

🎯 Requirements

• 3+ years of experience in information security, GRC, IT audit or compliance.
• Able to grasp both business and technical concepts and distill what matters.
• Hands-on with standards and frameworks such as ISO 27001, SOC 2 and NIST CSF, and with at least one
• Capable of reading and interpreting legal and regulatory texts, with working knowledge of data
• A builder: when a compliance task comes back for the third time, you script it, automate it or
• Technically fluent enough to talk to engineers about how a cloud SaaS platform is built and

🎁 Benefits

• Long-Term Incentive Program
• 2 sick days and 25 days of vacation, with the option to request additional Flexible Time-Off days
• The Global Family Support Program - a paid leave program to help all parents focus on the new
• Flexible working hours & hybrid work setup
• Benefit Plus - flexible employee benefit platform (incl. Multisport card)
• Annual package for mental health support