Security & Compliance Lead

Job not on LinkedIn

🔥 46 minutes ago

🇪🇸 Spain – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 53 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Archlet

WebsiteLinkedInAll Job Openings

51 - 200 employees

🤝 B2B

🏢 Enterprise

☁️ SaaS

B2B • Enterprise • SaaS

Archlet is an analytics-first Strategic Sourcing Platform designed to empower Procurement teams with user-centric RFx, bid-analytics, and scenario optimization capabilities for faster and better decision-making. It allows users to move strategic sourcing activities from email and Excel into a centralized platform, enabling holistic decisions by analyzing sourcing scenarios including non-cost components like sustainability, risk scores, and supplier diversity. The platform boosts efficiency and savings through advanced automation and sourcing optimization features, supporting collaborative procurement processes. Archlet's solutions are recognized globally, marking it as a Gartner Cool Vendor and a top company in Procurement Magazine's Top 100.

📋 Description

• Own the daily execution of security and compliance at Archlet • Own the ISO 27001 compliance program, maintain policies and evidence in Vanta, coordinate internal and external audits, and ensure control owners complete responsibilities and corrective actions • Build and execute Archlet’s first SOC 2 Type II program in 2027, including auditor selection and management, control and Vanta setup extensions, evidence coordination, and the final report • Serve as the first point of contact for security and compliance questions across the company • Complete customer assessments, explain safeguards, and maintain the Trust Center and reusable answers • Maintain risk registers, assess vendors, and keep subprocessor information current • Drive operational GDPR compliance and maintain DPAs, privacy assessments, and AI governance records • Lead annual independent penetration testing from scope and preparation through findings review, engineering tickets, retesting, and customer-facing reports • Partner with Platform and Application Engineering on cloud security, identity, secure development, and security validation of new features • Run access reviews, manage security-tool findings and routine security configurations, and coordinate recovery tests and incident-response preparation • Deliver employee and engineering training and run phishing exercises • Improve security processes through automation and thoughtful use of AI

🎯 Requirements

• Engineering background • Typically 5+ years in information security, security compliance, or GRC • Substantial responsibility in a SaaS or cloud-based software environment • Personally operated security programs and closed gaps, with results beyond recommendations and audit reports • Strong ISO 27001 experience • Independently managed an ISO 27001 audit cycle • Substantial delivery responsibility for a completed SOC 2 Type II cycle • Understanding of control design, operating evidence, auditor expectations, and remediation • Technical understanding of cloud architecture, authentication and authorization, least privilege, endpoint protection, logging, and common application vulnerabilities • Experience handling vendor assessments, risk registers, and operational GDPR requirements, including data processing agreements, retention, and international transfers • Experience completing enterprise security questionnaires • Excellent written and spoken English • Ability to organize competing requests, manage external providers, follow up with contributors, and drive work through to completion • Familiarity with Azure, Entra ID, Intune, Microsoft Defender, AI-assisted workflows, or AI governance is valuable • ISO 42001 experience is a bonus

🏖️ Benefits

• Full-time permanent employment • Autonomy to drive design decisions and make a real impact • Little bureaucracy and meetings • Supportive and innovative environment • Regular team activities, both virtual and in person

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume