Privacy & Security Officer

The role

You will own how the platform, customer data, and company are kept secure and compliant. You will maintain certifications, shape policies, and answer customer questions about security, privacy, or GDPR.

What you will do

• Maintain ISO 27001 and SOC 2 Type II certifications and improve ISMS documentation
• Create and maintain security and privacy policies and procedures
• Manage sub-processors in line with GDPR
• Complete security audits, assessments and questionnaires for customers
• Answer customer questions on security, privacy and GDPR
• Review and negotiate agreements with customers and internal teams
• Monitor data management and compliance across the company
• Run internal audits and recommend changes to keep us compliant
• Advise on how to handle privacy breaches
• Produce yearly security report

Required qualifications

• A bachelor's degree or higher
• 2+ years of experience in software security or with ISO 27001
• Experience implementing ISO 27001 or SOC 2 Type II for a product or company
• Hands-on experience with GDPR and the EU AI Act
• Fluent English, written and spoken, with strong communication skills
• Well organized, with a sharp eye for detail

Nice to have

• Background in data protection or legal compliance

About the company

easygenerator