Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience required

3 years minimum

Working hours

Regular working hours

Languages

English

Job source

startup.jobs

Tech stack

Amazon Web Services Microsoft Azure Data Mapping Systems Development Life Cycle Data Processing Information Security Management System Google Cloud Cloud Platform System

Job description

• Own and lead the company’s GRC implementation across ISO 27001 and GDPR.
• Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.
• Ensure GDPR compliance across all data processing activities, including data mapping, data leaks, and encryptions.
• Act as the primary point of contact for auditors and prepare the company for ISO audits.
• Identify compliance gaps and drive remediation plans with technical and non-technical teams.
• Develop governance policies, procedures, and risk management frameworks.
• Partner closely with Engineering and Security teams to embed controls into systems and SDLC processes.
• Monitor regulatory and compliance changes and translate them into actionable requirements.

Requirements

• 8+ years of experience in GRC, Risk, Compliance, or IT Audit roles
• 5+ years of strong hands-on experience with ISO 27001 and experience managing or supporting ISMS implementation.
• 3+ years of practical experience with GDPR data mapping, reviewing systems from the tech side.
• 5+ years of experience from a product tech company with global client reach in the US & EU (companies above 100 people).
• Experience working with internal and external auditors
• Very strong stakeholder management and communication skills across technical and non-technical teams.
• Fluent English

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on startup.jobs

Prepare application

• Draft this with your agent
• Open in Claude
• Open in ChatGPT
• Copy prompt