Information Security Officer

About the role

As the Senior Information Security Officer, you will be the subject matter expert and contact point for security controls within DataSnipper. You will manage and update internal security policies, operate the internal security risk activities and run SOC 2 and other audit activities. You protect DataSnipper's information systems, product and customer data from security threats while ensuring resilience and availability of our IT infrastructure.

About DataSnipper 🚀

Audit and finance are still massively manual and we are changing that. DataSnipper is a $1B, bootstrapped unicorn with 600,000+ users across 180+ countries, already embedded in the daily workflows of top audit and accounting firms.

Now, we are taking things further with our Excel Agent, bringing AI directly into where the work actually happens. Unlike generic AI tools, we do not sit on the sidelines. Our AI operates inside Excel, with access to real documents and audit evidence, meaning it does not just generate answers, it does the work, with full traceability.

We are not just applying AI, we are redefining how audit gets done. If you want to build something category-defining at scale, this is the place.

What You Will Do

• Define and implement relevant information security policies

• Lead risk assessment and internal security control efforts, including planning, tracking and monitoring remediation actions

• Maintain compliance with SOC 2, ISO 27001, GDPR and other relevant frameworks; manage the annual SOC 2 audit end-to-end, including evidence collection and auditor liaison

• Lead employee training and awareness initiatives

• Be the subject matter expert for client security questions and concerns

• Monitor and respond to security incidents, ensuring timely resolution and reporting

• Be the expert in one or more areas of information security to identify, prevent and respond to risks and incidents

• Partner with engineering and product teams to improve secure development processes

What You Bring

• 5–7 years in information security, with demonstrated ownership of compliance frameworks (SOC 2, ISO 27001) and their audits

• Working experience across InfoSec, data privacy and compliance frameworks (SOC reports, ISO 27000 series, COBIT), plus IT and cloud security audits

• Working knowledge across IAM, network and cloud security, secure development

• Hands-on vendor risk assessments and third-party due diligence