Your mission
We are seeking an experienced Information Security & Compliance Lead to take ownership of our organization’s security governance, risk, and compliance programs. This role is critical in maintaining our ISO 27001 certification, strengthening our security posture, and ensuring regulatory compliance across all business functions. The ideal candidate will drive a culture of security and collaborate closely with internal stakeholders, control owners, and external partners to uphold robust security standards.
- Maintain and continuously improve the ISO 27001 Information Security Management System (ISMS).
- Collaborate with control owners to ensure timely and effective implementation of technical and organizational controls.
- Lead and conduct internal audits, coordinate external audits, and manage audit findings to closure.
- Drive and maintain a risk management process, including risk identification, assessment, treatment, and reporting.
- Own and update security policies, procedures, and awareness programs across the organization.
- Conduct vendor and third-party security assessments (including DPAs and security questionnaires).
- Prepare and deliver risk and compliance reports for the Head of IT and the Board of Directors.
- Monitor changes in relevant laws and regulations (e.g., GDPR, NIS2) and adjust practices accordingly.
- Support incident response planning and exercises in cooperation with technical teams.
- Collaborate with IT, Legal, People & Culture, and other functions to ensure alignment on compliance requirements and initiatives.