Senior Information Security Officer
Core
Subject matter expert and contact point for security controls, managing internal security policies, risk activities, and SOC 2/ISO 27001 audits to protect systems and customer data.
Role type
Senior Information Security Officer (Compliance & Risk)
Builds
Secure IT infrastructure and compliance posture for a global audit/finance SaaS platform
Domain
Information Security, Compliance, Cloud Security
Required skills
Information security policy management, risk assessment, SOC 2 audit management, ISO 27001 compliance, GDPR compliance, IAM, network security, cloud security, secure development, vendor risk assessment, incident response
Preferred skills
Security operations, product security projects, EU security regulation expertise (EU AI Act, Cybersecurity Act), Vanta experience
Technologies
SOC 2, ISO 27001, GDPR, COBIT, Vanta
Responsibilities
Define and implement security policies, lead risk assessment and control efforts, manage annual SOC 2 audits, lead employee security training, respond to security incidents, partner with engineering on secure development
Seniority
Senior, hands-on IC
