Senior Information Security Lead – Remote, ISO 27001 & SOC 2 Expert

Secfix; Portugal; A distancia; EUR 90.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote Work

Competitive Salary

Equity

Mentorship

Development Budget

Home office Budget

Holidays

Health Insurance

Annual Retreat

Company Events

Tech Equipment

Descripción de la vacante

Secfix is seeking an Information Security Lead to scale our compliance program across ISO 27001, SOC 2, GDPR and beyond. This remote, EU-focused role combines compliance delivery, policy creation, and team leadership to deliver rigorous audits and trusted customer outcomes.

You will own the compliance roadmap, hire and mentor a small team of specialists, partner with product, CS and sales, and interface with auditors and customers to drive quality and consistency across the platform and services.

Formación

• 7+ years of hands-on information security and GRC experience in B2B SaaS.
• 2+ years in an InfoSec leadership role.
• Led ISO 27001 implementations and audits.
• Experience with GRC platforms and cloud security.
• Bachelor's degree in a related field.

Responsabilidades

• Own the compliance roadmap across multiple frameworks (ISO 27001, SOC 2, GDPR, NIS 2, DORA).
• Lead and grow the compliance team; ensure audit readiness and quality.
• Partner with CS, Sales, and Product to align compliance with product and customer needs.
• Translate gaps into structured product work with engineering.
• Maintain compliance content and playbooks within the platform.

Conocimientos

English (fluent)

InfoSec leadership

Iso 27001 project leadership

GRC platforms

Cloud platforms (AWS/Azure/GCP)

Project management

Written communication

Bachelor's degree in CS/IT/Eng

Educación

Bachelor's degree in Computer Science, Information Technology, Software Engineering or related field

Herramientas

Secfix (GRC platform)

AWS

Azure

GCP

Descripción del empleo

Secfix is seeking an Information Security Lead to scale our compliance program across ISO 27001, SOC 2, GDPR and beyond. This remote, EU-focused role combines compliance delivery, policy creation, and team leadership to deliver rigorous audits and trusted customer outcomes.

You will own the compliance roadmap, hire and mentor a small team of specialists, partner with product, CS and sales, and interface with auditors and customers to drive quality and consistency across the platform and services.