Information Security & Compliance Manager

The role

The Information Security & Compliance Manager will own the ISMS and GRC function. This person will manage ISO 27001 programs, compliance automation tooling, and customer security assurance.

What you will do

• Own the ISMS and ISO 27001 program including risk assessments, control implementation, internal audits, and management reviews.
• Administer and improve the Vanta compliance platform and its AI capabilities.
• Manage security questionnaires, customer audits, and due diligence requests.
• Build a trust center and reusable assurance package.
• Drive UK security certifications including Cyber Essentials and support NHS requirements like DTAC.
• Coordinate IT security operations including access management, endpoint security, and incident response.
• Support readiness for NIS2, the Cyber Resilience Act, and medical device and AI regulation.
• Maintain the risk register and prepare risk acceptance decisions for leadership.

Required qualifications

• 3-6 years of experience in information security, GRC, or IT compliance.
• At least one ISO 27001 implementation or certification cycle from the inside.
• Hands-on experience with compliance automation platforms like Vanta, Drata, or Secureframe.
• Technical literacy to read architecture diagrams and discuss cloud security controls.
• Understanding of GDPR Article 32, NIS2, and the CRA.
• Strong written English.
• Comfort with ambiguity and ownership.

Nice to have

• Danish

About the company

Teton is building a foundational data layer for the point of care using real-time, multimodal AI. The company uses a proprietary computer vision system to automate documentation and manage resident acuity.