Job Description
Requirements
- 4+ years of hands‑on experience in GRC, information security compliance, or a related field
- Proven experience managing SOC 2 Type I/II audits and certification processes
- Hands‑on experience with ISO 27001 implementation and/or certification audits
- Familiarity with DORA (Digital Operational Resilience Act) requirements and their practical application
- Experience handling customer security questionnaires and due diligence requests – Must
- Strong knowledge of information security risk management methodologies and frameworks
- Experience working with cross‑functional stakeholders and translating compliance requirements into actionable steps
- Highly proficient in spoken and written English
- Team player, detail‑oriented, with strong organizational and communication skills – Must
- Experience in a SaaS or B2B tech company – Advantage
- Degree in Information Technology /...