{"id":1916376,"url":"https://alion.io/job/duve-it-compliance-manager","title":"IT & Compliance Manager","company":{"id":2193731,"name":"Duve","domain":"duve.com","url":"https://alion.io/company/duve","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Management","role_family":"Management","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GDPR","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"CI/CD","optional":true},{"name":"Kubernetes","optional":true},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-10-05T14:42:36Z","employer_posted_date":"2026-10-18","last_verified_at":"2026-10-26T16:59:49Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Description\nDuve is a fast-growing hospitality tech company transforming how hotels and vacation rentals connect with their guests. Our platform helps them deliver personalized, digital guest experiences at scale from the moment a booking is made and throughout the entire stay.\nFounded in 2016 and headquartered in Tel Aviv, Duve is trusted by 1,000+ customers across 70+ countries, serving millions of travelers worldwide.\nFollowing a $60M funding round, Duve is entering its next phase of growth, with AI playing a central role in the evolution of our platform. As we continue to expand globally, we’re investing in advanced technology to shape the future of guest experience and how hotels and vacation rentals operate and connect with their guests.\nAbout this Role\nWe’re looking for a hands-on IT & Compliance Manager to own Duve’s internal IT environment and lead our security, privacy, and compliance operations.\nYou’ll be responsible for the systems our employees rely on every day, while driving our compliance program across frameworks such as SOC 2, ISO 27001, ISO 27701, PCI DSS, and GDPR.\nWorking closely with R&D, DevOps, HR, Legal, Sales, Customer Success, and external vendors, you’ll ensure our internal environment is secure, scalable, audit-ready, and able to support the requirements of our growing enterprise customer base.\nThis is an individual contributor role reporting directly to the CTO, with end-to-end ownership and responsibility for managing relevant external vendors and partners.\nRequirements\n4+ years of experience in IT, Information Security, Compliance/GRC, or a similar role\nHands-on ownership of at least one SOC 2 or ISO 27001 audit or certification cycle\nExperience with identity and endpoint management tools such as JumpCloud, Okta, Google Workspace, Entra ID, or similar\nWorking knowledge of AWS security fundamentals, including IAM, logging, network boundaries, and encryption\nPractical experience with GDPR and privacy operations, including DSRs, ROPA, and DPAs\nExperience creating and maintaining security policies, procedures, controls, and audit documentation\nAbility to independently own recurring IT, security, and compliance processes end-to-end\nStrong communication skills and the ability to work effectively with both technical teams and enterprise customers\nFluency in English and Hebrew\nNice-to-have\nExperience with Vanta, Drata, or a similar compliance automation platform\nExperience with ISO 27701, PCI DSS, or NIST CSF\nCertifications such as ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CIPP/E, or equivalent\nFamiliarity with Kubernetes, CI/CD security, vulnerability management, or dependency scanning tools\nScripting or automation experience\nExperience in a B2B SaaS environment, particularly with enterprise customers\nFamiliarity with AI governance and emerging enterprise security requirements around AI\nWhat you'll do\nOwn and continuously improve Duve’s information security and privacy management programs, including controls, policies, evidence, risk management, and corrective actions\nLead compliance and certification activities across SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS, and GDPR\nManage external audits end-to-end, including preparation, evidence collection, auditor coordination, findings, and remediation\nOwn enterprise security questionnaires, customer security requirements, and security documentation supporting Sales and Customer Success\nManage identity, access, and endpoint operations, including employee onboarding and offboarding, MFA, permissions, and periodic access reviews\nOwn core IT operations, including asset management, device security, office IT, and employee support escalations\nManage privacy processes alongside the DPO, including data inventory, ROPA, DSRs, retention, DPAs, and privacy impact assessments\nManage third-party and vendor security risk, including due diligence, ongoing reviews, and subprocessor management\nCoordinate security incident response, vulnerability management, security awareness, and business continuity processes\nPartner closely with R&D and DevOps on security controls, infrastructure risks, remediation, logging, monitoring, and technical security initiatives\nIdentify opportunities to automate repetitive IT and compliance processes and improve operational efficiency","description_format":"text","description_chars":4308,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Hebrew","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hotels & Resorts","Travel Technology"],"lifecycle":[{"event":"open","at":"2026-10-05T16:23:32Z"}],"visa":[],"liveness":{"score":70,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.779,"p_room":0.9,"age_days":20,"expected_fill_days":30,"reasons":["conf:2","win:mid"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/duve-it-compliance-manager","json_url":"https://alion.io/job/duve-it-compliance-manager.json","meta":{"generated_at":"2026-10-26T21:22:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28822,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2193731},"rest":"https://alion.io/mcp/rest/get_company?id=2193731"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fduve-it-compliance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fduve-it-compliance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fduve-it-compliance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/duve-it-compliance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fduve-it-compliance-manager"}]}