Data Compliance & Operations Lead (ISO 27001)

Accutics; København; On-site; DKK 900,000 - 1,300,000; Full time

Benefits offered by this job

Office in Copenhagen

Pension

Health insurance

Job summary

Accutics, based in Copenhagen, seeks a Compliance and Business Operations Manager to own information security reviews, GDPR compliance, and our ISO 27001 program. You will map and document data flows, administer Vanta, and support lighter financial tasks like payroll inputs and invoicing.

The role is office-based in Copenhagen, with a focus on shipping robust compliance across the business. You will collaborate with engineers and leadership to simplify data flows, stay ahead of regulatory

Qualifications

• Experience performing information security reviews of systems or vendors and documenting findings.
• Experience from a start-up or scale-up, with limited team/budget.
• Hands-on GDPR compliance experience including records of processing, DPAs and data subject requests.
• Interest in how a business works and why steps exist.
• Enjoy reading the fine print and regulatory frameworks.
• Track record of documenting processes or data flows that people actually use.
• Project management to plan reviews, rollouts or improvements across teams.
• Experience with a compliance automation platform (Vanta/Drata/Secureframe) or eagerness to learn one.
• Technical understanding to discuss systems with engineers without building them.
• Clear written English; Danish is a plus.

Responsibilities

• Run information security reviews of new and existing systems and vendors, document outcomes for audits.
• Maintain GDPR documentation reflecting actual practices: processing records, DPAs and retention rules.
• Keep the systems register, subprocessor list and access matrix current.
• Operate ISO 27001 program with the CTO, including risk assessments, audits and certification cycles.
• Administer Vanta, automate evidence collection and policy records where possible.
• Respond to security/privacy questionnaires from customers, including DORA requirements.
• Stay ahead of GDPR, DORA and EU AI Act developments and translate into actions.

Skills

InfoSec audits

Start-up/scale-up

GDPR compliance

Data flow documentation

Contracts & DPAs

Regulatory frameworks

Process documentation

Project management

Compliance automation

Technical liaison with engineers

Written English

Danish language

Tools

Jira

Confluence

Job description

Accutics, based in Copenhagen, seeks a Compliance and Business Operations Manager to own information security reviews, GDPR compliance, and our ISO 27001 program. You will map and document data flows, administer Vanta, and support lighter financial tasks like payroll inputs and invoicing.

The role is office-based in Copenhagen, with a focus on shipping robust compliance across the business. You will collaborate with engineers and leadership to simplify data flows, stay ahead of regulatory