Information Security Officer

As the Information Security Officer, I will lead our security strategy, operations, and compliance. This hands-on role will combine strategic security architecture with operational security management and regulatory compliance oversight. My key responsibilities will include: - Strategic (30%): - Define technical security architecture and standards across multi-cloud SaaS platforms. - Embed security into product development lifecycle and roadmap planning. - Conduct threat modeling and risk assessments for new features and system changes. - Evaluate and recommend security technologies and tools. - Operational (40%): - Manage security environments across Azure and AWS infrastructure. - Coordinate security incident response and vulnerability remediation. - Oversee security monitoring, alerting, and detection capabilities. - Manage vulnerability assessment and penetration testing programs. - Maintain identity and access management controls. - Compliance & Assurance (30%): - Maintain ISO27001 certification and manage audit cycles. - Ensure PCI/DSS compliance for payment processing systems. - Manage GDPR compliance across all products and operations. - Complete HECVAT and security questionnaires for higher education tenders. - Support sales and customer success with security documentation and evidence. - Act as the primary security contact for customers and prospects.