Senior Information Security Officer

Datasnipper

Skills

DataSnipper as a Senior Information Security Officer, where you will be the subject matter expert for security controls.

You will manage and update internal security policies, operate internal security risk activities, and run SOC 2 and other audit activities.
Your role will involve protecting DataSnipper's information systems, product, and customer data from security threats while ensuring the resilience and availability of our IT infrastructure.
You will also lead employee training and awareness initiatives, monitor and respond to security incidents, and partner with engineering and product teams to improve secure development processes.
Manage and update internal security policies, operate the internal security risk activities and run SOC 2 and other audit activities.
Define and implement relevant information security policies, lead risk assessment and internal security control efforts, including planning, tracking and monitoring remediation actions.
Maintain compliance with SOC 2, ISO 27001, GDPR and other relevant frameworks; manage the annual SOC 2 audit end-to-end, including evidence collection and auditor liaison.
Hands-on vendor risk assessments and third-party due diligence

5–7 years in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and their audits
Ability to test, evidence and validate operating effectiveness of controls
Leadership, communication and problem-solving; influences stakeholders at all levels
Proactive, self-directed, track record of tangible results

Working knowledge across IAM, network and cloud security, secure development
Working experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000 series, COBIT), plus IT and cloud security audits
Certifications: CISSP, CISM, CISA, CCSP, Azure security
Experience with Vanta
Experience with EU security regulation (EU AI Act, Cybersecurity Act, etc.)
Security operations or product security project experience