jobapplier

Information Security Officer

Datasnipper

Skills

Required

  • SOC 2
  • ISO 27001
  • information security and compliance frameworks
  • SOC reports
  • ISO 27000 series
  • COBIT
  • cloud security audits
  • information security control
  • testing process
  • vendor risk assessments

Preferred

  • CISSP
  • CISM
  • CISA
  • CCSP
  • SOC
  • les normes
  • GDPR
  • d'autres cadres

Join DataSnipper as an Information Security Officer, where you will be responsible for maintaining internal security policies, operating internal security risk activities, and supporting audit activities. You will play a crucial role in protecting the company's information systems, product, and customer data from security threats while ensuring the resilience and availability of our IT infrastructure. You will collaborate with all departments and contribute to defining, implementing, and maintaining information security policies.

Responsibilities

  • Contribuer à la définition, à la mise en œuvre et au maintien des politiques de sécurité de l'information.
  • Effectuer des évaluations des risques et des activités de contrôle de la sécurité interne, y compris le suivi et la surveillance des actions de remédiation.
  • Soutenir la conformité avec les normes SOC 2, ISO 27001, GDPR et d'autres cadres pertinents; contribuer activement au processus d'audit SOC 2 annuel.
  • Solid understanding of key security domains, including identity and access management, network and cloud security, and secure development practices

Requirements

  • Working knowledge of information security and compliance frameworks (e.g., SOC reports, ISO 27000 series, COBIT), as well as IT and cloud security audits
  • Practical experience with information security control and testing process
  • Strong communication and problem-solving skills, with the ability to collaborate effectively with stakeholders across teams and grow into broader ownership
  • Practical experience with vendor risk assessments and third-party due diligence
  • Proactive, self-directed mindset with a strong track record of delivering tangible results
  • 2–5 years of experience in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and associated audits
  • Experience with Vanta
  • Familiarity with EU security regulations such as EU AI Act, Cybersecurity Act etc

Preferred

  • Relevant security certifications: CISSP, CISM, CISA, CCSP, Azure security certifications etc