Security and Compliance Manager

About the role

Join Ataccama’s Information Security team to lead the day‑to‑day operations of the security compliance program and GRC initiatives. Reporting to the CISO, you will shape the ISMS, coordinate audits, and ensure regulatory standards are met across the organization.

Key responsibilities

• Own the audit calendar, manage SOC 1, SOC 2 Type II, ISO 27001:2022 and customer‑driven assessments, including evidence collection and remediation tracking.
• Maintain the corporate risk register, conduct periodic risk assessments, and produce quarterly NIST CSF‑based risk reports.
• Author and update ISMS policies, ensuring alignment with GDPR, NIS2/ZoKB, EU AI Act, CRA and industry frameworks such as GxP, DORA, FFIEC, NERC CIP, PCI DSS.
• Review and negotiate security terms in customer contracts and manage the RFx and security questionnaire workflow.
• Onboard new compliance standards, perform gap analyses and drive remediation with engineering, cloud operations and IT.
• Lead a small team of compliance specialists and interns, handling supervision, task allocation, mentoring and hiring.

Required profile

• 3+ years experience in information security, GRC, IT audit or compliance.
• Hands‑on knowledge of ISO 27001, SOC 2, NIST CSF and at least one customer‑driven framework (e.g., GxP, PCI DSS).
• Ability to interpret legal and regulatory texts (GDPR, NIS2, EU AI Act, CRA).
• Strong communication skills for policy writing, presentations and executive briefings.
• Experience supervising or mentoring specialists/interns.

Required skills

• ISO 27001
• SOC 2
• NIST CSF
• AWS
• Azure
• Kubernetes
• CI/CD pipelines

What we offer

• Long‑Term Incentive Program
• 25 vacation days plus flexible time‑off
• Hybrid working hours and remote flexibility
• Benefit Plus platform, mental health support, and Udemy courses
• Company laptop, mobile phone and data package
• Access to AI tools, conference tickets and company library