Security Engineer

• Run Ataccama's security compliance program, including the audit calendar, control framework, security and compliance risks, and executive reporting materials
• Coordinate internal and external SOC 1, SOC 2 Type II, ISO 27001:2022 and customer-driven assessments, including evidence collection, auditor logistics and remediation tracking
• Operate the corporate risk management program, maintain the risk register, facilitate risk assessments and prepare quarterly NIST CSF 2.0-based reporting
• Maintain the ISMS policy and standards library and keep it current against regulatory and customer-driven frameworks
• Review security terms in customer contracts, schedules and addenda with Legal
• Manage RFx and customer security questionnaire workflows, direct specialists and interns, and review high-stakes submissions
• Assess and onboard compliance standards and regulations through control mappings, gap analyses and remediation plans
• Support customer assurance commitments for regulated customers, including GxP validation lifecycle artifacts and Quality and Security Agreements
• Build and maintain internal GRC workflows for scalable team output
• Provide input into incident response and vendor risk management, including due diligence, playbooks, cost analysis and customer notifications
• Manage a small team of compliance specialists and interns through supervision, allocation, quality review, mentoring and hiring
• Drive security awareness and training initiatives, including secure use of AI tools
• Liaise with Cloud and App Security, Engineering, Legal, Sales and Customer Success, translating audit, technical and business topics for non-specialists
• Report to the CISO and collaborate with Cloud and App Security, Engineering, Cloud Operations, Product Management and internal IT

Security Engineer jobs in Czechia

Security and Compliance Manager