{"id":1503266,"url":"https://alion.io/job/ataccama-security-and-compliance-manager","title":"Security and Compliance Manager","company":{"id":6129,"name":"Ataccama","domain":"ataccama.com","url":"https://alion.io/company/ataccama","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Management","role_family":"Management","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":65000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2667},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"EU AI Act","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-29T14:22:50Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-21T05:58:52Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Have you run SOC 2 and ISO 27001 or similar audits end to end, kept a corporate risk register alive, and negotiated security terms with enterprise customers in regulated industries, preferably in a tech company? Do you reach for establishing functional workflow when a compliance process comes back for the third time? Join our Information Security team and take over the day-to-day running of our security compliance team and Governance, Risk, and Compliance (GRC) program.\nReporting to the CISO, this role offers you the opportunity to participate in building and maintaining Ataccama ISMS, work across departments, represent the security program externally to our auditors and customers, and help ensure that our organization continues to meet evolving regulatory and industry standards. You will cooperate with our Cloud and App Security, Engineering, Cloud Operations, Product Management as well as internal IT on making sure our security compliance standards are not just defined and communicated, but practically implemented, automated, proactively monitored and reported.\nYour Challenge\nRun our security compliance program day to day: own the audit calendar, keep the control framework current, manage the security and compliance risks and prepare the materials that feed executive-level reporting and governance forums.\nCoordinate internal and external audits (SOC 1, SOC 2 Type II, ISO 27001:2022 and customer-driven assessments), including evidence collection, auditor logistics, and tracking of findings through to remediation with control owners.\nOperate the corporate risk management program: maintain the risk register, facilitate periodic risk assessments with control owners, prepare quarterly risk reporting (NIST CSF 2.0 based), and surface cross-departmental risks for treatment decisions.\nMaintain the ISMS policy and standards library: author and revise core policies, coordinate scheduled reviews with control owners, and keep them current against regulatory obligations (GDPR, NIS2/ZoKB, EU AI Act, CRA) and customer-driven frameworks (GxP, DORA, FFIEC, NERC CIP, PCI DSS).\nReview security terms in customer contracts, security schedules and addenda with enterprise and regulated-industry customers, together with Legal.\nManage the RFx and customer security questionnaire process: operate the workflow against established quality standards, direct the specialists and interns answering questionnaires, and act as senior reviewer for high-stakes prospect and customer submissions.\nAssess and onboard new compliance standards and regulations: control mappings, gap analyses and remediation plans in coordination with Engineering, Cloud Operations and IT. Support customer assurance commitments for regulated customers, including GxP validation lifecycle artifacts and Quality and Security Agreements.\nBuild and maintain internal GRC so the team scales its output without adding headcount.\nProvide input into incident response and vendor risk management: vendor due diligence, incident playbooks and cost analysis, and customer notifications.\nManage a small team of compliance specialists and interns, including work supervision, task allocation, quality review, mentoring and hiring.\nHelp drive security awareness and training initiatives, including secure use of AI tools across the company.\nLiaise with stakeholders across Cloud and App Security, Engineering, Legal, Sales and Customer Success on compliance-impacting topics, translating between the audit, technical and business worlds for non-specialist audiences.\nIs This You?\n3+ years of experience in information security, GRC, IT audit or compliance\nAble to grasp both business and technical concepts, and distill what matters.\nHands-on with standards and frameworks such as ISO 27001, SOC 2 and NIST CSF, and with at least one customer-driven framework (GxP, DORA, FFIEC, NERC CIP or PCI DSS).\nCapable of reading and interpreting legal and regulatory texts, with working knowledge of data privacy and cybersecurity regulation (GDPR, NIS2/ZoKB, EU AI Act, CRA).\nA builder: when a compliance task comes back for the third time, you script it, automate it or build a scalable workflow, and you use AI tools responsibly and can set guardrails for others.\nTechnically fluent enough to talk to engineers about how a cloud SaaS platform is built and operated (AWS and Azure, Kubernetes, CI/CD, vulnerabilities, identity and access) and about common security threats.\nA strong communicator, comfortable writing policies and documentation, giving presentations, and briefing executives, auditors and customers.\nProactive, positive, and self-organized: you don't wait to be told what to do, and you are comfortable owning a whole agenda in a small team with few formalities.\nExperience supervising or mentoring specialists or interns, including hiring.\nStrong written and verbal English communication skills; Czech is a plus for ZoKB and local partners.\nRelevant certifications (e.g., ISO 27001 Lead Auditor or Lead Implementer, CISA, CRISC, CISSP, CIPP/E) are a plus.\nPeople management skills and experience are welcome.","description_format":"text","description_chars":5092,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Governance & Catalogs","Master Data Management","Data Quality & Observability"],"lifecycle":[{"event":"open","at":"2026-09-30T04:49:04Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.84,"p_room":0.9,"age_days":21,"expected_fill_days":58,"reasons":["conf:3","win:mid"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/ataccama-security-and-compliance-manager","json_url":"https://alion.io/job/ataccama-security-and-compliance-manager.json","meta":{"generated_at":"2026-10-21T11:09:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15748,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6129},"rest":"https://alion.io/mcp/rest/get_company?id=6129"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fataccama-security-and-compliance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fataccama-security-and-compliance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fataccama-security-and-compliance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ataccama-security-and-compliance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fataccama-security-and-compliance-manager"}]}