Information Security Manager • •

Stravito AB; Santander; A distancia; EUR 50.000 - 90.000; Jornada completa

Descripción de la vacante

An innovative firm is seeking an Information Security Manager to lead security and privacy compliance initiatives. You will be at the forefront of managing security frameworks like ISO 27001 and SOC 2, ensuring that the organization meets its compliance requirements while fostering a culture of security awareness. This role offers the chance to work in a remote-first environment, collaborate with diverse teams, and contribute to the development of cutting-edge security solutions. If you are passionate about information security and eager to make a significant impact, this opportunity is perfect for you.

Servicios

Competitive compensation package

Remote-first work environment

Collaborative team culture

Company events throughout the year

Flexible work processes

Formación

• 3+ years of experience in information security with a focus on compliance frameworks.
• Strong knowledge of ISO 27001, SOC 2, and privacy regulations.

Responsabilidades

• Lead implementation and maintenance of key security frameworks including ISO 27001 and SOC 2.
• Design and implement comprehensive security awareness training programs.

Conocimientos

Information Security

ISO 27001

SOC 2

Privacy Regulations

Communication Skills

Educación

Bachelor's degree in Information Security

Bachelor's degree in Computer Science

Herramientas

ISO 42001

CISSP

CISM

Descripción del empleo

We're looking for smart, kind and curious minds to join us on our mission. Maybe that’s you?

You know that corporate document or piece of research you know you have somewhere but you can’t seem to find it? The struggle to gather, organize and visualize all corporate knowledge and insights is real.

We are Stravito and this is the problem we solve.

Due to the universal nature of this problem, our customers come from various industries all around the world. We help world-leading organizations, such as McDonald’s, AT&T, Burberry and Heineken, get closer to their customers and make better, insights-backed decisions by organizing their knowledge and making it easy to access through our intuitive platform.

We really mean it when we say we're a diverse and international team as our team of 100 has more than 30 different nationalities! We are guided by our operating principles : simplicity first, an “own it, do it” mentality, embracing different perspectives, and enjoying the journey together.

About the job

As an Information Security Manager, you will manage our security and privacy compliance initiatives, serving as the key point person for security frameworks, customer security assessments, and privacy-related matters. You will work closely with our trust team, legal team, and customer-facing departments to bridge technical security, compliance requirements, and business objectives.

Your main responsibilities will include :

Leading implementation and maintenance of key security frameworks including ISO 27001, SOC 2, and ISO 42001

Responding to security questionnaires and facilitating customer security due diligence

Designing and implementing comprehensive security awareness training programs

Collaborating with our legal team on privacy-related initiatives and compliance requirements

Developing and maintaining security policies, procedures, and controls aligned with multiple compliance frameworks

About you

We believe that you have extensive experience in information security with a focus on compliance frameworks and are skilled at explaining complex security concepts to various audiences. You demonstrate a strong knowledge of ISO 27001, SOC 2, and similar security frameworks, as well as privacy regulations and their technical implementation. With strong communication skills, you effectively collaborate with a variety of stakeholders, from technical teams to senior management and customers.

To be successful in this role, you need :

Bachelor's degree in Information Security, Computer Science, or related field, or similar work experience

3+ years of experience in information security with a focus on compliance frameworks

Deep understanding of ISO 27001, SOC 2, and similar security frameworks

Strong knowledge of privacy regulations and their technical implementation

Excellent communication skills with the ability to explain complex security concepts to various audiences

Relevant security certifications (e.g., CISSP, CISM, or ISO 27001 Lead Auditor)

We would be particularly impressed if you have :

Experience with ISO 42001 or AI security frameworks

Previous experience in customer-facing security roles

Background in audit response and management

Knowledge of cloud security architecture and controls

What’s in it for you?

You will join a remote-first and globally spread team, with company events a couple of times each year as the icing on the cake. We offer a fun, collaborative environment where everyone truly cares and helps each other. We have zero micro-management and instead you are encouraged to cultivate your own processes while giving and receiving feedback for improvement. Add to that a competitive compensation package, the possibility of working with cutting-edge technology in our industry (such as GenAI) and to be part of simplifying the professional lives of many - what’s not to like?