Compliance Manager

Job not on LinkedIn

🔥 13 hours ago

🇨🇿 Czechia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

duvo.ai

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤖 Artificial Intelligence

☁️ SaaS

🏢 Enterprise

Artificial Intelligence • SaaS • Enterprise

duvo. ai is a no-code AI automation platform that creates persistent AI agents to execute end-to-end business workflows across web apps, legacy portals, email, phone, and data systems. It lets teams describe processes in natural language, connects to tools via APIs or a secure browser, and runs scheduled or event-driven jobs to complete tasks, update systems, and produce evidence — all with enterprise-grade security and auditing. duvo. ai is positioned for operations teams seeking to replace manual, repetitive work with automated execution at scale.

📋 Description

• Own the Q&A library mapped to ISO 27001, SOC 2, ISO 42001, NIS2, and GDPR • Govern ownership, approval status, evidence links, confidentiality classifications, and review dates for the Q&A library • Maintain consistency across the Q&A library, trust center, Trust Center portal, policies, and engineering practices • Manage customer security reviews from questionnaire intake through delivery • Validate unverified answers with Security, Engineering, or Product • Keep public trust-center and NDA-gated Trust portal document sets current • Run the annual audit and certification programme, including SOC 2 Type II renewal, ISO 27001 and ISO 42001 surveillance, NIS2 assessment, penetration testing and retesting, and customer right-to-audit requests • Gather evidence and liaise with the DPO and auditors • Manage audit findings, remediation, and management assertions • Operate the ISMS and AIMS with the Security Lead, including the risk register, statement of applicability, policy lifecycle, access reviews, internal audit, management review, and security steering cadence • Own vendor policy and third-party risk processes, including intake, tiering, due diligence, DPA terms, AI-provider data-retention and no-training commitments, approval, re-review, and offboarding • Manage subprocessor reviews, customer notifications, DPA updates, and portal updates • Report to the Head of Engineering and work daily with the Security Lead

🎯 Requirements

• Experience running a certification programme end to end through a real audit cycle, including SOC 2, ISO 27001, or equivalent • Ability to write precise, evidenced, and honest security questionnaire answers • Experience building or running a third-party/vendor review process • Experience maintaining an accurate subprocessor list under contractual notice obligations • Evidence-gathering discipline and audit-readiness • Judgment about escalation to Engineering, Security, or Legal • Ability and willingness to use AI tooling and agents • Plain writing skills • Experience with financial services or telco buyers is a plus • Experience with AI governance or ISO 42001 is a plus • Experience with GRC platforms such as Vanta, Drata, Mycroft, Segregato, or similar is a plus • Experience working on the vendor side as a processor answering to controllers is a plus

🏖️ Benefits

• Unlimited AI budget • Autonomy to do your best work • Professional development and mentoring autonomy • Ability to fly out to talk to important customers • Real AI product with real enterprise customers