{"id":3865075,"url":"https://alion.io/job/apptweak-security-compliance-specialist","title":"Security & Compliance Specialist","company":{"id":670883,"name":"AppTweak","domain":"apptweak.com","url":"https://alion.io/company/apptweak","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":null},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brussels, Belgium"],"countries":["BE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-11-06T09:06:08Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T17:51:32Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"AppTweak is ISO 27001 certified, and our customers increasingly expect clear, reliable answers on how we protect their data. Maintaining this level of trust is no longer a side activity: it requires dedicated ownership, rigour, and continuity throughout the year, not only in the weeks before an audit.\nToday, compliance work and customer security questions are spread across the engineering team. ISO controls, policy updates and audit preparation compete with delivery priorities, and Deal Desk often has to escalate RFPs and security questionnaires to engineers for questions that are not development questions at all.\nThe Security & Compliance Specialist brings these two topics under one owner. Internally, they keep our ISMS alive and audit-ready: checks are done on time, policies are up to date, and evidence is available when needed. Externally, they become the go-to expert for Deal Desk on SLAs, data retention, backups, GDPR and related questions, so that customers get fast, consistent and accurate answers, and engineers can stay focused on building.\nThis is a part-time position (50%). It reports directly to the Head of Engineering, and works in close collaboration with Legal, notably on GDPR, data processing agreements and the contractual commitments we make to customers.\nWhat You Will Do\nISO 27001 & ISMS Ownership\nOwn the day-to-day running of our Information Security Management System (ISMS) and make sure it reflects how AppTweak actually works.\n\nFollow up on the ISO control plan: make sure recurring checks are performed by the right owners, on time, and that evidence is properly documented.\n\nMaintain the risk register, the Statement of Applicability, and track corrective actions and non-conformities until they are closed.\n\nSupport the classification and follow-up of our suppliers, in line with our supplier tiering approach.\n\nPolicies & Documentation\nMaintain and regularly review our security and compliance policies (access control, backups, data retention, incident management, business continuity, etc.).\n\nMake sure policies are clear, accessible and known by the teams they apply to, not only written for the auditor.\n\nKeep a single, reliable source of truth for compliance documentation that other teams can easily consult.\n\nAudit Preparation & Support\nPrepare internal and external audits: plan the timeline, gather evidence, and coordinate with the people involved.\n\nBe the main point of contact for auditors during the audit, and follow up on findings afterwards.\n\nTurn audit outcomes into concrete improvement actions, and make sure they are delivered.\n\nDeal Desk & Customer Trust\nAct as the first line of support for Deal Desk on non-development technical questions: SLAs, data retention, backup policies, GDPR, hosting, access management and security practices.\n\nHelp answer RFPs and security questionnaires, and only escalate to engineering the specific points that genuinely require it.\n\nBuild and maintain a reusable knowledge base of approved answers, so Deal Desk can become more autonomous over time.\n\nEnsure what we commit to customers is consistent with our policies and what we actually do.\n\nCross-Team Collaboration\nWork closely with Engineering Managers, DevEx/infrastructure, HR, Legal and Deal Desk to embed compliance into existing processes rather than adding friction.\n\nRaise awareness of security and compliance topics across the company, and help onboard new joiners on the essentials.\n\nContinuous Improvement & Strategic Projects\nBe proactive: challenge how things are done today and propose improvements to our security, compliance and Deal Desk processes, rather than only running them as they are.\n\nDrive strategic compliance projects end to end, such as building and maintaining our CAIQ (Consensus Assessments Initiative Questionnaire) so customer security assessments can be answered faster and more consistently.\n\nRequirements\nHands-on experience with ISO 27001 (implementation, maintenance or audits), ideally in a SaaS or tech company.\n\nGood understanding of GDPR and of common customer security topics (SLAs, backups, data retention, access control).\n\nComfortable talking with both engineers and sales: able to understand technical context and explain it in clear, simple language.\n\nStructured, rigorous, autonomous and proactive: you follow things through without needing to be chased, and you naturally suggest better ways of working.\n\nFluent in English; French is a plus.\n\nA specialist profile: you do not need management experience, but you enjoy owning a topic end to end and can organise your work efficiently within a part-time (50%) schedule.\n\nDon't tick every box? We'd still like to hear from you. We hire for potential and we'll help you grow.\nAppTweak welcomes applicants of every gender, age, background and identity. If you need any adjustment during the hiring process, just let us know.\n[Please note you will need a Belgian valid visa/work permit to be eligible for the role].\nWhat Success Looks Like\nAfter the first year, and within a half-time scope, ISO controls run on a predictable rhythm with no last-minute rush before audits, policies are up to date and known by the teams, audits close with few findings, Deal Desk answers most security and compliance questions without involving engineers, and our CAIQ is completed and kept up to date.\nWhat's in it for you\nJoin one of Belgium's top tech scale-ups.\n\nCompetitive and optimized salary package, structured to make the most of what you earn.\n\nMeal vouchers and eco-vouchers.\n\nComplementary Health Insurance Plan.\n\n12 RTT days per year, on top of regular holidays.\n\nFlexible, hybrid work setup.\n\nOpportunities for continuous learning and creative thinking.\n\nQuarterly team-building events and a yearly company-wide retreat.\n\nSerious about food. From themed lunches to spontaneous kitchen moments, food is genuinely part of how we connect at AppTweak.","description_format":"text","description_chars":5896,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Health insurance","Hybrid work"],"hiring_locations":[{"name":"Belgium","iso":"BE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Search Engine Optimization (SEO)","Marketing Analytics & Attribution"],"lifecycle":[{"event":"open","at":"2026-11-06T11:41:40Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/apptweak-security-compliance-specialist","json_url":"https://alion.io/job/apptweak-security-compliance-specialist.json","meta":{"generated_at":"2026-11-08T20:49:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":43543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":670883},"rest":"https://alion.io/mcp/rest/get_company?id=670883"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapptweak-security-compliance-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapptweak-security-compliance-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapptweak-security-compliance-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/apptweak-security-compliance-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapptweak-security-compliance-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3865075}},{"tool":"search_jobs","arguments":{"company":"apptweak.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3865075},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}