Security, Risk & Compliance Manager

Responsibilities

• Lead the implementation and maintenance of security and compliance frameworks, including ISO 27001, SOC2, GDPR, and the EU AI Act
• Define policies, processes, and controls to protect company and customer data
• Conduct risk assessments, audits, and gap analyses to proactively identify and mitigate security risks
• Collaborate with Engineering, Product, and Operations to integrate security and compliance into daily workflows
• Serve as the primary point of contact for internal and external audits, regulators, and partners
• Continuously monitor and improve Lio’s security posture as the organization grows

Requirements

• Proven experience in GRC, security, and compliance management
• Experience in SaaS or enterprise software environments
• Familiarity with ISO 27001, SOC2, GDPR, and other security/compliance frameworks
• Ability to translate regulatory requirements into practical processes and controls
• Strong communication skills for technical and non-technical stakeholders
• Ability to work independently as the first hire in the function