FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in developing security policies and procedures aligned with SOC 2 Type 2 and ISO 27001 standards, while effectively communicating security concepts to diverse stakeholders. Proven ability to lead security governance in mid-sized companies and manage risk registers in compliance with GDPR and other privacy regulations.
Highest-signal resume keywords
SOC 2 Type 2 CertificationISO 27001 CertificationSecurity Governance LeadershipAWS ExperienceCISSP Certification
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Policy DevelopmentRisk ManagementIncident Response PlanningAccess Control ImplementationBCP/DR Policy DraftingSDLC SecurityCI/CD SecurityCloud SecurityVulnerability ScanningClient Security Audits
Soft Skills
Communication SkillsStakeholder EngagementTeam Collaboration
Tools & Technologies
EDR ToolsSIEM ToolsVulnerability-Scanning ToolsGoogle Workspace
Certifications & Qualifications
CISSPCISMCISA
Industry Keywords
GDPR CompliancePhilippines Data Privacy ActAustralian Privacy ActSoftware OutsourcingMid-Sized Companies
Tech Stack
Tools & technologiesAWSCloudSDLC
About the role
Key responsibilities & impact- Develop procedures, policies, and work instructions to fulfill SOC 2 Type 2 and ISO 27001 controls
- Design a 12-month security roadmap balancing Swiss quality expectations with software outsourcing agility
- Establish a risk register and prioritize remediation based on business impact
- Ensure data handling meets European GDPR, the Philippines Data Privacy Act, and the Australian Privacy Act standards
- Standardize responses to client security questionnaires
- Draft and implement Incident Response, Access Control, and BCP/DR policies
- Oversee selection and implementation of EDR, SIEM, and vulnerability-scanning tools
Requirements
What you’ll need- Proven experience leading security governance in mid-sized companies (200–500 employees)
- Experience with SOC 2 Type 2 or ISO 27001 certification
- Experience in outsourcing/software services companies ideally
- Strong technical foundation across SDLC, CI/CD security, and cloud platforms
- Experience with AWS and Google Workspace
- Ability to communicate security concepts to junior technical staff and non-technical stakeholders
- Experience handling client security audits and vendor assessments
- Experience working with distributed teams across Europe, Asia, and Australia is a plus
- Experience with early-stage startups is a plus
- CISSP, CISM, or CISA certification preferred
Benefits
Comp & perks- Career and personal development opportunities
- Well-being, trust, and autonomy-focused work culture
- Flexible work arrangements
- Remote work
- Work on projects the company believes in