ABOUT REDCLOUD

We are revolutionizing B2B commerce by delivering scalable, innovative solutions that empower businesses to grow and thrive in a competitive landscape. Our AI powered platform streamlines logistics, payments, and supply chain operations, making it easier for companies to connect, transact, and succeed. With a diverse and dynamic team, we’re committed to driving impact, fostering collaboration, and shaping the future of global trade.
RedCloud Technology is looking for a Security & Compliance Specialist to join our core security team. This is a critical role responsible for managing and maturing our IT compliance program, ensuring we meet our regulatory obligations and protect the data of our company and our customers. Working alongside our security engineers, you will be the go-to expert for IT controls, vendor risk, and data protection.
This role is ideal for a proactive IT professional who enjoys being a bridge between technical teams and compliance requirements. You will not be just checking boxes, you will be a trusted partner to the business, helping teams understand their obligations and implementing practical, effective solutions. You will play a key part in fostering a culture where security and compliance are seen as business enablers.

• You will manage and mature our existing Security & Compliance program. This includes refining policies and procedures, tracking our compliance posture, and developing security and compliance awareness training for employees.
• You will facilitate regular risk review sessions with technical and business teams to identify and assess potential risks. You will be responsible for defining, documenting, and monitoring the effectiveness of our IT controls.
• You will own our third-party vendor risk assessment process from start to finish, evaluating the security and compliance posture of new and existing vendors to ensure they meet our standards.
• You will act as a key point of contact for external audits and help the business prepare for assessments against frameworks like ISO 27001 and SOC 2.
• You will help manage our compliance with data privacy regulations, particularly GDPR, by conducting data protection impact assessments and advising the business on data handling best practices.
• You will work closely with our Engineering, Product, Legal, and business teams to provide practical compliance advice and ensure requirements are integrated into our processes and systems.
• Stay current with evolving regulations and best practices in areas like AI. You will help shape the company’s approach to AI governance by identifying risks and establishing responsible usage policies.