Compliance Analyst - Helsinki

Hub; Helsinki; On-site; EUR 48,000 - 72,000; Full time

Job summary

Verda in Helsinki is seeking an experienced Compliance and Information Security professional to strengthen our regulatory foundations for our AI cloud. You will support certifications like ISO27001/27701/27017/27018, SOC 2 Type II, and future schemes, turning complex requirements into practical policies and controls.

Collaborate with cross-functional teams, maintain logs and documentation, update policies, and help with GDPR, NIS2, AI Act compliance.

Qualifications

• 2+ years of experience in compliance, information security, or a closely related field.
• Degree in a related field to data privacy and compliance; equivalent work experience considered.
• Strong written and verbal communication skills in English.
• Project management and organizational skills for startup environments.
• Familiarity with ISO27001, ISO27701, ISO27017, ISO27018, SOC2 Type I/II, and C5.
• Hands-on experience with data privacy regulations (e.g., GDPR).
• Technical aptitude and interest in how security/compliance connects with cloud providers.

Responsibilities

• Assist in monitoring and reporting on certifications (ISO27001/27017/27018/27701) and SOC 2 Type II.
• Review and update internal policies, procedures, and documentation to best-practice standards.
• Assist with regulatory compliance (GDPR, NIS2, AI Act) and other identified regulations.
• Coordinate with cross-functional teams for internal reviews, vendor risk, and risk assessments.
• Maintain compliance logs, registers, controls, and documentation.
• Develop internal documentation and training materials to increase compliance awareness.
• Stay up to date with current regulations to improve our compliance posture.

Skills

Experience in compliance

English communication

Project management

Regulatory frameworks

GDPR knowledge

Cloud/regulatory intersection

Education

Degree in data privacy/compliance

Job description

At Verda, we're building a full-stack AI cloud, covering everything from data centers and hardware to our own cloud platform that the world's leading AI teams use to do serious AI work.

We strive to make a positive mark on the world through the infrastructure we build and give leading teams a service they can truly depend on. Headquartered in Helsinki, we operate globally with offices in London and San Francisco.

Join Verda while it’s still being built - not once it’s finished.

About the role

You will help strengthen the security, privacy, and regulatory foundations behind Verda’s growing AI cloud business. You will support our existing certifications and assurance programs, improve our readiness for evolving requirements. Working closely with teams across the company, you will turn complex requirements into practical policies, controls, and ways of working that support continued growth.

Your responsibilities

• Assist in monitoring and reporting on our activities and ensure compliance with existing certifications (ISO27001/27017/27018/27701 and C5), reports SOC 2 Type II and for any future certifications.

• Review and suggest updates to internal policies, procedures, and documentation to raise them to best-practice standards, while adhering to and supporting our ways of working and culture.

• Assist with regulatory compliance with GDPR, NIS2, AI Act, and other identified regulations.

• Support internal compliance reviews, audits, vendor risk management, and risk assessments, including coordination with cross-functional teams.

• Maintain and update compliance-related logs, registers, controls, and databases, ensuring accurate and accessible documentation.

• Assist in developing internal documentation and training materials to increase compliance awareness throughout the company.

• Stay up to date with current and emerging regulations and best practices to support continuous improvement of our compliance posture.

Your key competencies

• 2+ years of experience in compliance, information security, or a closely related field

• Degree in a related field to data privacy and compliance. Equivalent work experience may be considered.

• Strong written and verbal communication skills in English, and the ability to convey complex information clearly to both technical and non-technical audiences.

• Project management and organizational skills, with the ability to handle multiple tasks in a startup environment.

• Familiarity with two or more of the following frameworks: ISO27001, ISO27701, ISO27017, ISO27018, SOC2 Type I or Type II, and C5.

• Hands-on experience working with data privacy regulations (e.g., GDPR).

• Technical aptitude and willingness to learn how security and compliance requirements intersect with cloud providers.

Practicalities

• Work mode: On-site in Helsinki office

• Start date: Immediate start is available.

• Level of expertise: Experienced

• Employment type: Full-time and permanent.

What's next

We're building fast and this role needs the right person behind it. There's no artificial deadline, but when we find who we're looking for, we move.