Head of Information Security & Compliance (Remote)

Ethos; España; Remote; EUR 93,000 - 127,000; Part time

Job summary

Ethos is seeking an experienced Head of Information Security to guide governance, risk management, and compliance for AI model training documentation. The role emphasizes ownership of SOC 2, ISO 27001, and NIST mapping, with strong skills in drafting high-quality security documents and dashboards.

The position offers flexible hours (5–20 hours per week) and fully remote work, allowing you to schedule tasks around your calendar. Start ASAP and contribute to critical security program development.

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework work.
• Hand-on experience writing or reviewing risk assessments and vendor security questionnaires.
• Expert-level document, spreadsheet, and slide craftsmanship with excellent written communication.

Responsibilities

• Create, evaluate, and refine AI-generated documents, spreadsheets, and slide decks across core workflows (SOC 2, ISO 27001, NIST).
• Develop security policy and control framework mapping documents for board-level risk dashboards.
• Lead due diligence questionnaires and security documentation for vendors and third parties.

Skills

Governance

Risk management

Compliance

IT audit

Information security

Job description

Ethos is seeking an experienced Head of Information Security to guide governance, risk management, and compliance for AI model training documentation. The role emphasizes ownership of SOC 2, ISO 27001, and NIST mapping, with strong skills in drafting high-quality security documents and dashboards.

The position offers flexible hours (5–20 hours per week) and fully remote work, allowing you to schedule tasks around your calendar. Start ASAP and contribute to critical security program development.