Information Security Manager

We're looking for smart, kind and curious minds to join us on our mission. Maybe that’s you?

You know that corporate document or piece of research you know you have somewhere but you can’t seem to find it? 🤯  The struggle to gather, organize and visualize all corporate knowledge and insights is real.

We are Stravito and this is the problem we solve.

Due to the universal nature of this problem, our customers come from various industries all around the world. We help world-leading organizations, such as McDonald’s, AT&T, Burberry and Heineken, get closer to their customers and make better, insights-backed decisions by organizing their knowledge and making it easy to access through our intuitive platform.

We really mean it when we say we're a diverse and international team as our team of 100 has more than 30 different nationalities! We are guided by our operating principles: simplicity first, an “own it, do it” mentality, embracing different perspectives, and enjoying the journey together.

About the job

As an Information Security Manager, you will manage our security and privacy compliance initiatives, serving as the key point person for security frameworks, customer security assessments, and privacy-related matters. You will work closely with our trust team, legal team and customer-facing departments to bridge technical security, compliance requirements, and business objectives.

Your main responsibilities will include:

• Leading implementation and maintenance of key security frameworks including ISO 27001, SOC 2, and ISO 42001
• Responding to security questionnaires and facilitating customer security due diligence
• Designing and implementing comprehensive security awareness training programs
• Collaborating with our legal team on privacy-related initiatives and compliance requirements
• Developing and maintaining security policies, procedures, and controls aligned with multiple compliance frameworks

About you

We believe that you have extensive experience in information security with a focus on compliance frameworks and are skilled at explaining complex security concepts to various audiences. You demonstrate a strong knowledge of ISO 27001, SOC 2, and similar security frameworks, as well as privacy regulations and their technical implementation. With strong communication skills, you effectively collaborate with a variety of stakeholders, from technical teams to senior management and customers.

To be successful in this role, you need:

• Bachelor's degree in Information Security, Computer Science, or related field, or similar work experience
• 3+ years of experience in information security with focus on compliance frameworks
• Deep understanding of ISO 27001, SOC 2, and similar security frameworks
• Strong knowledge of privacy regulations and their technical implementation
• Excellent communication skills with ability to explain complex security concepts to various audiences
• Relevant security certifications (e.g., CISSP, CISM, or ISO 27001 Lead Auditor)

We would be particularly impressed if you have:

• Experience with ISO 42001 or AI security frameworks
• Previous experience in customer-facing security roles
• Background in audit response and management
• Knowledge of cloud security architecture and controls

What’s in it for you?

You will join a remote-first and globally spread team, with company events a couple of times each year as the icing on the cake 🎂 We offer a fun, collaborative environment where everyone truly cares and helps each other. We have zero micro-management and instead you are encouraged to cultivate your own processes while giving and receiving feedback for improvement. Add to that a competitive compensation package, the possibility of working with cutting-edge technology in our industry (such as GenAI) and to be part of simplifying the professional lives of many - what’s not to like?

We look forward to hearing from you!