Position: Head of Security and Compliance
Company: Readdle
Category: Security
Experience required: 5y
English level: upper
Published: 2021-10-01T00:00:00+03:00

Here at Readdle, we aim to redefine personal productivity and shape the “future of work” by creating outstanding apps and services. Our popular apps such as Scanner Pro, PDF Expert, Spark, and Documents, were downloaded over 175 million times worldwide. In many cases, our apps defined mobile software categories, such as document scanning, email, document management, and calendaring. Readdle apps won numerous awards, got to the top positions on the App Store charts, and, most importantly, are loved by millions.

We are expanding the team and looking for a Head of Security and Compliance to strengthen Readdle's informational security processes. In this role, you will have to find a balance between security controls and the business needs, while communicating with different departments in terms of security-related efforts.

**What you’ll do:**
- Assess and improve existing information security and data privacy controls and mechanisms at Readdle
- Maintain Fluix ISO 27001 compliant ISMS
- Work with IT and business process owners to identify compliance concerns, ensure policies/processes are consistently applied, and provide overall support on IT compliance-related issues. Identify gaps in the design and operating effectiveness of controls and identify opportunities for more efficient and effective controls
- Organize the work with data privacy inquiries of customers
- Performing Data Protection Officer functions

**About you:**
- 5+ years of experience in information security risk assessment, compliance, and/or security operations
- ISO 27001 Lead Auditor or Lead Implementer certificate or other relevant credentials
- Deep understanding and knowledge of GDPR, CCPA, etc
- Advanced level of English

**Will be a plus:**
- Experience with other compliance standards (SOC2, PCI DSS, etc)
- Advanced Security Credentials. Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), or other similar credentials

**What you will get:**
- Customer-centric culture. We put our customers first. It means that every employee can benefit from interacting with our customers directly. It enables us to create and deliver the best solutions for millions of our users
- Professional growth. We are professionals at everything we do. It means we own our decisions, our work, and our results. We provide quality feedback to others and welcome feedback as an opportunity to learn and improve
- A team of amazing people. The greatest power we have is the team. It means we care about each other, ensure transparency, and invest in everyone's success
- Impact on our products. We aim to create valuable products. It means that we improve ourselves constantly by overcoming constraints, simplifying our processes, and improving our capacity
- Innovative culture. We try to be innovative and creative in everything we do. It means that we expect, appreciate and value new ideas