{"id":4076552,"url":"https://alion.io/job/reversinglabs-security-compliance-specialist","title":"Security Compliance Specialist","company":{"id":17650,"name":"ReversingLabs","domain":"reversinglabs.com","url":"https://alion.io/company/reversinglabs","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":47,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Zagreb, Croatia"],"countries":["HR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST AI RMF","optional":true}],"status":"live","first_seen_at":"2026-11-11T15:33:00Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-14T04:18:16Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Please note: for this position, we are only considering candidates who are already based in Croatia.\nAt ReversingLabs, we provide the world’s largest threat intelligence repository to protect software development and power advanced security solutions, keeping leading cybersecurity organizations and Fortune 500 enterprises informed and ahead of threats. Only ReversingLabs delivers the software package analysis speed and depth needed to protect against software supply chain risk.\nOur vision is clear: to arm every company with end-to-end insights so that development teams release securely, IT purchases safely, and the SOC can effectively detect, isolate, and respond. We are seeking extraordinary talent for this game-changing opportunity to help forge this transformational journey at ReversingLabs.\nAbout the role\nOur customers include US and European banks, insurers, government agencies and some of the largest technology and security companies. Before they buy or renew, their security teams want proof: full policies, evidence that controls work, and detailed answers to questionnaires that have grown far more demanding in the last three years.\nYou'll make sure we can give that proof quickly and accurately. You'll handle security questionnaires, our evidence library and our Trust Portal day to day, and work closely with the Director of Security Engineering & Compliance, who sets direction, reviews high-risk answers and leads customer calls. Your work directly decides how fast enterprise deals and renewals close.\nWhat you'll do\nSecurity questionnaires and customer reviews\nHandle security questionnaires from first draft to submission: SIG, CAIQ, custom bank, insurer and government questionnaires, and the new wave of AI/ML questionnaires\nGet input from Engineering, Research and Legal where needed, and bring high-risk answers to the Director for review\nRun large assessments and due-diligence reviews: write supporting documents such as system security plans, upload evidence to customer risk portals, and answer findings with remediation plans and dates\nTrack follow-ups and annual re-reviews against the renewal calendar so Sales is never surprised\nTrust Portal and Customer Assurance\nTrust Portal maintenance: Keep the Trust Portal current after every audit, pen test and policy change, maintain its library and handle document access requests\nProactive content: Spot FAQs and add them to Trust Portal library\nSOC 2 attestation support\nBuild evidence library used for both SOC 2 and customers\nCollect SOC 2 evidence from control owners on schedule and support the Director through the annual audit\nTrack audit findings and remediation items to closure, working with IT Support and Engineering\nPolicies and compliance support\nKeep the policy register and draft policy updates for the Director\nRun 3rd party vendor and sub-processor reviews \nPrepare compliance documents customers ask for under NIS2, GDPR and DORA\nSecurity controls oversight\nAccess management: Run periodic user access reviews and partner with IT Support to strengthen joiner, mover and leaver processes\nLogging and monitoring: Verify that logging and monitoring meet our policy and SOC 2 commitments, and work with Security Engineering to close gaps\nEncryption and data protection: Assess encryption at rest and in transit, key management practices and data retention against internal standards.\nBC/DR: Participate in planning and running disaster recovery tests and incident response tabletop exercises, and help turning the lessons learned into updated plans.\nCloud security: Review cloud configurations against benchmarks and drive remediation of findings with Engineering.\nWhat we're looking for\nMust have\n4+ years in information security, GRC, IT audit or security compliance\nHands-on experience answering security questionnaires (SIG, CAIQ or custom) and/or preparing evidence for SOC 2 or ISO 27001 audits\nSolid understanding of security controls (access management, encryption, logging, BC/DR, secure development, cloud), enough to explain how a control works and what proves it\nWorking knowledge of SOC 2, ISO 27001 and NIST CSF, and of GDPR and NIS2\nExcellent written English: clear, consistent answers, knowing they can become contract commitments\nWell organised: you run many requests with deadlines at once and follow up with people until you get what you need\nComfortable working with US-based Sales teams and customers, with some overlap with US hours\nNice to have\nCISA, CISM, CRISC, CISSP, CompTIA Security+ or CIPP/E\nExperience with a GRC, Trust Center or questionnaire-automation platform\nExperience with AI/ML security questionnaires or AI governance frameworks (ISO/IEC 42001, NIST AI RMF)\nBackground in a SaaS, security vendor or fintech company\nBenefits\nHybrid work options (paid accommodation & transportation to Zagreb during onboarding for remote employees)\nFlexible working hours\nGenerous compensation and a bonus system based on annual performance\nHefty personal education budget and possibility to attend leading conferences and seminars in the field\nCompany library and possibility to order books of choice via Amazon\nPermanent contract in a fast-growing global company with Fortune 500 & governmental agencies as clients\nChallenging projects in a dynamic, collaborative team\nGreat career advancement opportunities - clear goals & internal promotions\nEmployee referral bonus program, EUR 1,060 net for junior position, EUR 2,123 net for mid to senior positions, and EUR 2,654 net for principal/managerial positions\nMultisport card, annual health checkup, newborn child allowance, rent-cost, and 3rd pillar pension benefits\nWellness Weekends - quarterly, company-wide three day weekend, starting with a company paid Friday off for all employees\nFully covered car garage in Radnička for all employees\nAbout ReversingLabs\nReversingLabs is the leader in software supply chain security, helping the world's most security-conscious organizations detect and respond to threats hidden inside software. Our platform is trusted by Fortune 500 companies, government agencies, and security teams globally. We're a company that takes the work seriously and takes care of the people doing it.\nCareers Page · LinkedIn · Our Technology","description_format":"text","description_chars":6240,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"Croatia","iso":"HR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Threat Intelligence","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-11-11T15:33:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":47,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/reversinglabs-security-compliance-specialist","json_url":"https://alion.io/job/reversinglabs-security-compliance-specialist.json","meta":{"generated_at":"2026-11-14T05:47:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9805,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17650},"rest":"https://alion.io/mcp/rest/get_company?id=17650"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freversinglabs-security-compliance-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freversinglabs-security-compliance-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freversinglabs-security-compliance-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/reversinglabs-security-compliance-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freversinglabs-security-compliance-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4076552}},{"tool":"search_jobs","arguments":{"company":"reversinglabs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4076552},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}