SaaS Cybersecurity Compliance Specialist

Docebo; Milano; In loco; EUR 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Docebo is seeking a Cybersecurity Compliance Analyst to safeguard security posture across our global SaaS platform. You will translate complex frameworks like NIS2, NIST, GDPR, ISO, SOC, and FedRAMP into actionable actions that accelerate deal cycles and strengthen customer trust.

You’ll lead audits, respond to security requests, map client requirements to standard processes, and collaborate with legal and GRC teams to ensure ongoing compliance and risk management.

Competenze

• 4+ years supporting security activities, audits, and compliance in SaaS.
• Familiar with ISO/IEC standards and SOC 2.
• Strong knowledge of GDPR, privacy regulations, and data protection.
• Experience with vendor risk management and audits.
• Excellent written and verbal English communication.

Mansioni

• Respond to prospect and customer security requests and deliver flawless responses regarding Docebo's compliance and security posture.
• Lead and support annual customer audits and CAPs with the GRC team.
• Review Customer Agreements, Terms & Conditions, and Data Processing Addendums with the legal team.
• Monitor security controls and maintain dashboards for vendor risk management.
• Publish and curate compliance materials on Docebo trust pages and automate processes where possible.

Conoscenze

SaaS security

Compliance audits

Privacy regulations

Regulatory frameworks

Vendor risk management

Automation tooling

Formazione

Bachelor's degree in Computer Science or related field

Strumenti

Vanta

1UP

Descrizione del lavoro

Docebo is seeking a Cybersecurity Compliance Analyst to safeguard security posture across our global SaaS platform. You will translate complex frameworks like NIS2, NIST, GDPR, ISO, SOC, and FedRAMP into actionable actions that accelerate deal cycles and strengthen customer trust.

You’ll lead audits, respond to security requests, map client requirements to standard processes, and collaborate with legal and GRC teams to ensure ongoing compliance and risk management.