Security & Compliance Lead: ISO 27001 & SOC 2

Archlet; Spanien; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Archlet is seeking an experienced security and compliance leader to work with our CTO/CISO, owning the daily execution of security and compliance across the organization.

You will drive ISO 27001 and SOC 2 programs, manage vendor risk, privacy obligations, and security improvements while enabling fast product growth and a trusted customer experience.

You’ll collaborate with engineering, product, and legal teams to translate risk into action and maintain our Trust Center for customers.

Qualifikationen

• Typically 5+ years in information security, security compliance, or GRC in SaaS/cloud environments.

Aufgaben

• Own ISO 27001 compliance program, maintain policies and evidence, coordinate audits.
• Lead SOC 2 Type II program planning and execution, manage auditor and evidence.
• Serve as primary security/compliance contact across the company and for customers.
• Maintain risk registers and GDPR artifacts (DPAs, privacy assessments, AI governance).
• Lead penetration testing and remediation with engineering teams.
• Improve security across product and workplace: cloud security, access reviews, security configurations.
• Deliver security training, run phishing exercises, and streamline security reviews using automation.

Kenntnisse

ISO 27001

SOC 2 Type II

Cloud security

GDPR

Audits & evidence

English communication

Vendor risk

Security governance

Tools

Vanta

Azure

Entra ID

Intune

Microsoft Defender

Jobbeschreibung

Archlet is seeking an experienced security and compliance leader to work with our CTO/CISO, owning the daily execution of security and compliance across the organization.

You will drive ISO 27001 and SOC 2 programs, manage vendor risk, privacy obligations, and security improvements while enabling fast product growth and a trusted customer experience.

You’ll collaborate with engineering, product, and legal teams to translate risk into action and maintain our Trust Center for customers.