Information Security Lead

This is a fully remote position, open to applicants in Europe.

📋 Description

• Take ownership of and lead the compliance roadmap within the Secfix platform, spanning various compliance frameworks.

• Execute ISO 27001 and related frameworks from start to finish for clients.

• Mentor and enhance the skills of the compliance team by sharing knowledge and reviewing their work.

• Perform internal audits for strategic and complex clients.

• Evaluate internal audits conducted by junior team members.

• Assist Customer Success Managers (CSMs) and sales representatives with client inquiries and participate in calls when specialized expertise is required.

• Ensure the quality of compliance materials, including policies, evidence templates, playbooks, and security awareness training.

• Address framework deficiencies and integrate auditor feedback into team practices and platform enhancements.

• Collaborate with product and engineering teams to translate compliance gaps into organized product initiatives.

• Work alongside Customer Success, Product, and Founders on priority alignment.

• Strengthen partnerships with certification bodies and educate auditors on the Secfix platform.

⛳️ Requirements

• Proficient in English (C1 or C2 level is essential).

• Over 7 years of practical experience in information security and Governance, Risk, and Compliance (GRC) within B2B SaaS.

• Successfully led more than 5 ISO 27001 certification projects as an implementer and/or auditor in a startup or mid-market environment.

• At least 2 years of experience in people/team management.

• Practical experience with a GRC platform such as Secfix or comparable systems.

• Familiarity with cloud infrastructure readiness across AWS, Azure, and GCP.

• Experience with posture analysis and remediation planning.

• Strong project management capabilities.

• Ability to decompose ambiguous initiatives into specific deliverables, prioritize effectively, and execute.

• Excellent written communication skills with the ability to create clear and precise compliance content for varied audiences.

• A strong ownership mindset with the capability to work as a senior individual contributor without needing direction.

🏝️ Benefits

• Fully remote work arrangement with a virtual office in Gather.

• Attractive equity compensation package.

• Direct access to exceptional mentors.

• €1,000 annual budget for personal development.

• Budget for home office setup.

• Access to co-working facilities.

• 26 days of vacation plus local public holidays.

• Comprehensive health insurance coverage.

• Annual retreat for team bonding.

• Company-wide events to foster community.

• Provision of the latest technology equipment (MacBook, monitors, headphones).