What you’ll be doing

You will act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence.

You report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers.

You will own;

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it stays current as the business evolves
• Prepare the InfoSec program for investor and M&A due diligence scrutiny

Customer Trust

• Own the response to enterprise customer security questionnaires and RFPs
• Represent Staffbase credibly in customer security reviews, calls, and audits
• Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality

Risk & Vendor Security

• Maintain the risk register and drive risk treatment decisions with relevant stakeholders
• Own vendor security assessments for critical and high-risk suppliers
• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness