Cybersecurity & Compliance Lead — Remote Europe

Cyber StrategiX; France; Remote; EUR 100,000 - 130,000; Full time

Job summary

FullEnrich is seeking a Cybersecurity Manager to own security, privacy, and IT programs across a Europe-facing, remote environment. You will lead security governance, risk management, and compliance initiatives, partnering with Engineering and leadership to protect data, scale controls, and support enterprise customers.

You'll drive SOC 2 and ISO 27001 programs, oversee vendor security, data transfers, incident response, and security training, while building a scalable security function from the

Qualifications

• Proven experience owning a security and compliance program end to end.
• Strong knowledge of SOC 2 or ISO 27001 certification processes.
• Experience with GDPR and cross-border privacy requirements.

Responsibilities

• Security & Infrastructure: Own and improve security posture with Engineering support.
• Compliance & Certifications: Manage SOC 2, ISO 27001, evidence collection & audits.
• Security Governance & Risk Management: develop policies, risk registers, and incident prep.
• Corporate IT & Identity Management: oversee MDM, IAM, SSO, SaaS access controls.
• Data Privacy & Vendor Security: manage data privacy ops, cross-border transfers, vendor assessments.
• Customer Trust & Enterprise Security: lead security due diligence and customer-facing docs.

Skills

Security governance

Vulnerability management

Regulatory compliance

Cloud security

Risk assessment

Education

SOC 2 certification

ISO 27001 certification

Tools

MDM

SSO/SCIM

Auditing tools

Job description

FullEnrich is seeking a Cybersecurity Manager to own security, privacy, and IT programs across a Europe-facing, remote environment. You will lead security governance, risk management, and compliance initiatives, partnering with Engineering and leadership to protect data, scale controls, and support enterprise customers.

You'll drive SOC 2 and ISO 27001 programs, oversee vendor security, data transfers, incident response, and security training, while building a scalable security function from the