Security & Compliance Lead — ISO 27001 / SOC 2 (SaaS)

Archlet; Spanien; Hybrid; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Archlet is seeking an experienced security and compliance lead to work directly with the CTO/CISO. You will own daily security operations, ISO 27001 program, audits, and data privacy governance in a fast-growing SaaS scale-up.

You’ll coordinate penetration tests, manage vendor risk, and help customers understand our safeguards. You’ll collaborate with engineering to strengthen cloud security and secure development, shaping Archlet’s security posture.

Qualifikationen

• Typically 5+ years in information security, security compliance, or GRC in a SaaS/cloud environment.
• Strong ISO 27001 and proven SOC 2 experience.
• Technical depth to work effectively with engineers and understand cloud architecture, authentication, least privilege, and risk remediation.
• Practical privacy and risk-management skills with GDPR experience including DPAs and data transfers.
• Clear communication with customers and colleagues in English; able to explain safeguards clearly.
• Reliable execution across teams, prioritizing work and escalating risks early.
• An adaptable, practical approach with willingness to tackle both recurring work and new security challenges.

Aufgaben

• Keep Archlet secure and audit-ready. Own ISO 27001 program, maintain policies and evidence, coordinate audits, and ensure corrective actions.
• Lead our first SOC 2 Type II program in 2027, manage auditor, extend controls and evidence collection, and own the ongoing program.
• Help customers confidently choose Archlet by answering security questions and maintaining Trust Center materials.
• Turn security, privacy, and AI risks into action by maintaining risk registers, handling vendor assessments, and GDPR compliance documents.
• Lead penetration testing and remediation; coordinate with engineering on findings and verification.
• Improve security across product and workplace by partnering with Engineering on cloud security, identity, secure development, and incident preparedness.
• Make secure working easier with training, phishing exercises, and automation to accelerate evidence collection and security reviews.

Kenntnisse

Security governance

ISO 27001

SOC 2

Cloud security

Audit management

GDPR

Vanta

Penetration testing

Vendor risk management

Technical depth

Tools

Vanta

Azure

Entra ID

Intune

Microsoft Defender

Jobbeschreibung

Archlet is seeking an experienced security and compliance lead to work directly with the CTO/CISO. You will own daily security operations, ISO 27001 program, audits, and data privacy governance in a fast-growing SaaS scale-up.

You’ll coordinate penetration tests, manage vendor risk, and help customers understand our safeguards. You’ll collaborate with engineering to strengthen cloud security and secure development, shaping Archlet’s security posture.