Data Security & Compliance Director

About the role

This role owns Syllo's data security compliance function and reports to the Head of Legal, Security, and Compliance. You ensure that Syllo's processes and policies support our certifications and satisfy the scrutiny of auditors and clients.

• Manage the renewal of Syllo's certifications, including our SOC 2 and ISO 27001 programs, and ensure compliance with internal policies for handling sensitive information.
• Develop processes for providing clients key information, including responses to vendor security questionnaires (VSQs).
• Define the security and configuration conditions that software must meet before Syllo adopts it for internal use.
• Coordinate the response to security issues per policy, and ensure data is handled in a manner compliant with applicable privacy regimes.

Qualifications

• 6+ years in data security compliance, with direct ownership of SOC 2 and ISO 27001 programs.
• Demonstrated experience managing VSQ processes at volume across enterprise sales pipelines.
• Experience building compliance programs at high-growth B2B SaaS companies preferred.
• CISSP, CISM, or equivalent certification preferred.
• Bachelor's degree required. Advanced degree a plus.