Serve as the primary point of contact and subject matter expert for customers regarding security and compliance inquiries.
Develop, implement, and maintain a comprehensive information security and compliance program that meets the needs of our customers and complies with relevant regulations, including SOC2 and GDPR.
Lead and mentor a team (if applicable) responsible for implementing and maintaining security controls.
Work closely with internal IT and operations teams to ensure that security controls are integrated effectively into our systems and processes.
Oversee regular security assessments and audits to identify vulnerabilities and ensure compliance.
Manage and oversee external audits for SOC2 and GDPR compliance, including vendor selection and due diligence and performance management.
Stay up-to-date on the latest security threats, vulnerabilities, and regulatory changes.
Develop and deliver security awareness training to employees.
Report regularly to senior management on the status of the information security and compliance program.
Take ownership of our infosec related obligations for each customer including monitoring and tracking
Own Tech Solutions related to InfoSec when adopted and implemented