Information Security Officer

As an Information Security Officer, you will be a subject matter contact for security controls within DataSnipper. You will help maintain internal security policies, operate internal security risk activities, and support SOC 2 and other audit activities. You will play an important role in protecting DataSnipper's information systems, product, and customer data from security threats while ensuring the resilience and availability of our IT infrastructure. You will work closely with all departments, alongside the other Security team members.

Audit and finance are still massively manual and we are changing that. DataSnipper is a $1B, bootstrapped unicorn with 600,000+ users across 180+ countries, already embedded in the daily workflows of top audit and accounting firms.

Now, we are taking things further with our Excel Agent, bringing AI directly into where the work actually happens. Unlike generic AI tools, we do not sit on the sidelines. Our AI operates inside Excel, with access to real documents and audit evidence, meaning it does not just generate answers, it does the work, with full traceability.

We are not just applying AI, we are redefining how audit gets done. If you want to build something category-defining at scale, this is the place.

• Contribute to defining, implementing, and maintaining information security policies
• Operate risk assessment and internal security control activities, including tracking and monitoring remediation actions
• Support compliance with SOC 2, ISO 27001, GDPR, and other relevant frameworks; actively contribute to the annual SOC 2 audit process, including evidence collection and day-to-day auditor communication
• Support and deliver employee training and awareness initiatives to drive adoption of guidelines and policies
• Provide support for client requests related to the security topics
• Monitor and respond to security incidents, ensuring timely resolution and appropriate reporting collaborating with the relevant teams
• First responder for the information security requests from the internal DataSnipper stakeholders, escalate where necessary
• Collaborate with engineering and product teams to improve secure development processes

• 2–5 years of experience in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and associated audits
• Working knowledge of information security and compliance frameworks (e.g., SOC reports, ISO 27000 series, COBIT), as well as IT and cloud security audits
• Solid understanding of key security domains, including identity and access management, network and cloud security, and secure development practices
• Practical experience with vendor risk assessments and third-party due diligence
• Practical experience with information security control and testing process
• Proactive, self-directed mindset with a strong track record of delivering tangible results
• Strong communication and problem-solving skills, with the ability to collaborate effectively with stakeholders across teams and grow into broader ownership
• Familiarity with EU security regulations such as EU AI Act, Cybersecurity Act etc
• Relevant security certifications: CISSP, CISM, CISA, CCSP, Azure security certifications etc
• Experience with Vanta

Recruitment Process

At DataSnipper, we believe great ideas come from different perspectives, experiences, and backgrounds. We are committed to building an inclusive workplace and providing every candidate with a fair and equitable hiring experience.

Our hiring decisions are merit based and grounded in the skills, experience, potential, and capabilities relevant to the role.

We welcome applicants regardless of age, race, ethnicity, nationality, gender, gender identity or expression, sexual orientation, religion, disability, or any other characteristic that makes you, you.

What matters to us is what you can bring to the role, the team, and DataSnipper.