FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Compliance Specialist
ReversingLabs. Handle security questionnaires from first draft to submission, including SIG, CAIQ, custom bank, insurer, government, and AI/ML questionnaires .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in information security and compliance, with a strong focus on SOC 2, ISO 27001, and GDPR requirements. Capable of managing security questionnaires, conducting audits, and collaborating with cross-functional teams to ensure adherence to security controls and policies.
Highest-signal resume keywords
Information SecuritySOC 2 ComplianceSecurity QuestionnairesGRC PlatformsNIST CSF
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security ControlsAccess ManagementEncryptionLoggingBusiness Continuity/Disaster RecoveryCloud SecurityAudit PreparationRisk AssessmentPolicy DraftingCompliance Documentation
Soft Skills
Excellent Written CommunicationOrganizational SkillsCollaborationFollow-Up
Tools & Technologies
GRC PlatformsTrust CenterQuestionnaire-Automation Platforms
Certifications & Qualifications
CISACISMCRISCCISSPCompTIA Security+CIPP/E
Industry Keywords
SaaSFintechSecurity VendorAI Governance FrameworksISO/IEC 42001NIS2GDPR
Tech Stack
Tools & technologiesCloud
About the role
Key responsibilities & impact- Handle security questionnaires from first draft to submission, including SIG, CAIQ, custom bank, insurer, government, and AI/ML questionnaires
- Gather input from Engineering, Research, and Legal and escalate high-risk answers to the Director
- Run large assessments and due-diligence reviews; prepare system security plans, upload evidence to customer risk portals, and respond to findings with remediation plans and dates
- Track follow-ups and annual re-reviews against the renewal calendar
- Maintain the Trust Portal after audits, penetration tests, and policy changes; maintain its library and handle document access requests
- Identify FAQs and add them to the Trust Portal library
- Build the evidence library for SOC 2 and customer requests
- Collect SOC 2 evidence from control owners and support the annual audit
- Track audit findings and remediation items to closure with IT Support and Engineering
- Maintain the policy register and draft policy updates
- Run third-party vendor and sub-processor reviews
- Prepare compliance documents requested under NIS2, GDPR, and DORA
- Run periodic user access reviews and strengthen joiner, mover, and leaver processes with IT Support
- Verify logging and monitoring against policy and SOC 2 commitments and close gaps with Security Engineering
- Assess encryption, key management, and data retention against internal standards
- Participate in disaster recovery tests and incident response tabletop exercises and update plans based on lessons learned
- Review cloud configurations against benchmarks and drive remediation with Engineering
Requirements
What you’ll need- 4+ years in information security, GRC, IT audit or security compliance
- Hands-on experience answering security questionnaires (SIG, CAIQ or custom) and/or preparing evidence for SOC 2 or ISO 27001 audits
- Solid understanding of security controls (access management, encryption, logging, BC/DR, secure development, cloud), enough to explain how a control works and what proves it
- Working knowledge of SOC 2, ISO 27001 and NIST CSF, and of GDPR and NIS2
- Excellent written English: clear, consistent answers, knowing they can become contract commitments
- Well organised: you run many requests with deadlines at once and follow up with people until you get what you need
- Comfortable working with US-based Sales teams and customers, with some overlap with US hours
- CISA, CISM, CRISC, CISSP, CompTIA Security+ or CIPP/E (nice to have)
- Experience with a GRC, Trust Center or questionnaire-automation platform (nice to have)
- Experience with AI/ML security questionnaires or AI governance frameworks (ISO/IEC 42001, NIST AI RMF) (nice to have)
- Background in a SaaS, security vendor or fintech company (nice to have)
- Candidates must already be based in Croatia
Benefits
Comp & perks- Hybrid work options (paid accommodation & transportation to Zagreb during onboarding for remote employees)
- Flexible working hours
- Generous compensation and a bonus system based on annual performance
- Hefty personal education budget and possibility to attend leading conferences and seminars in the field
- Company library and possibility to order books of choice via Amazon
- Permanent contract in a fast-growing global company with Fortune 500 & governmental agencies as clients
- Challenging projects in a dynamic, collaborative team
- Great career advancement opportunities - clear goals & internal promotions
- Employee referral bonus program, EUR 1,060 net for junior position, EUR 2,123 net for mid to senior positions, and EUR 2,654 net for principal/managerial positions
- Multisport card, annual health checkup, newborn child allowance, rent-cost, and 3rd pillar pension benefits
- Wellness Weekends - quarterly, company-wide three day weekend, starting with a company paid Friday off for all employees
- Fully covered car garage in Radnička for all employees