Information Security & Compliance Manager (all genders)

About the Position

Information Security & Compliance Manager (all genders)

Join fiskaly as an Information Security & Compliance Manager to lead our re-certification audit and shape our security and compliance strategy.

Responsibilities

• Own our ISMS end-to-end - scope, policies, controls, risk register, management review, and continuous improvement - and be accountable for its effectiveness, not just its documentation.
• Lead our re-certification in early 2027: assess the current state, close the open nonconformities, plan and run internal audits, prepare the management review and the evidence, coordinate with the certification body, and be present throughout the audit.
• Define and build ISMS processes tailored to fiskaly - business continuity, change management, incident and vulnerability management, supplier management - designed for how a cloud-native engineering team actually works.
• Run the company-wide risk management programme, translating abstract risks into prioritized, actionable engineering and business tasks.
• Be the independent expert voice towards management: report on the state of security and compliance, explain what our processes are for, and give concrete direction on what to improve and in which order.
• Partner with Engineering and Product to embed security-by-design into the SDLC, CI/CD, and infrastructure-as-code, and move evidence collection from manual gathering to automated, continuous monitoring wherever possible.
• Support Legal and Sales on customer due diligence: security questionnaires, contract security reviews, and enterprise customer audits.
• Oversee vendor risk management with lightweight, scalable assessments that surface third-party risk without stalling procurement.
• Maintain our ISO 9001 QMS and GDPR framework, monitor the regulatory landscape (NIS2, AI Act), and translate it into practical roadmaps for leadership.
• Drive a security-aware culture beyond mandatory training - position compliance as a business enabler, not a blocker.

Requirements

• 5+ years in Information Security, Compliance, or Risk Management, with a track record of building or maturing an ISMS.
• Experience owning at least one ISO 27001 certification, surveillance, or re-certification audit end-to-end.
• Deep knowledge of ISO 27001 (2022) and its controls; working knowledge of ISO 9001 and GDPR; able to navigate NIS2 without hand-holding.
• Genuine fluency in SaaS and cloud environments: understand GCP and/or Azure, CI/CD, infrastructure-as-code, and modern change management well enough to audit them and talk to engineers as a peer.
• A solid understanding of secure SDLC - what good looks like and where the evidence lives.
• Strong risk management foundations (ISO 31000, COSO, or comparable) and the ability to present risk to C-level stakeholders in business terms.
• A hands-on, delivery mindset: you define what needs to be done, then do it, scaling your effort to the deadline.
• Excellent communication and presentation skills in English (C1); German is a plus.
• Based in Vienna or willing to relocate, with regular on-site presence and full presence during audits.
• Relevant certifications (ISO 27001 Lead Implementer / Lead Auditor, CISM, CISSP, CISA) and experience with modern GRC platforms (e.g., Vanta, Drata) are strong pluses.

We Offer

• A real ownership mandate: you'll be the person who takes fiskaly through re-certification and shapes how security, quality, and compliance work at scale.
• A highly collaborative and international team that values trust, growth, and transparency.
• Competitive salary and benefits package.
• Hybrid setup with a modern office in Vienna, modern tools, and a strong culture of autonomy.
• Time and budget for continuous learning and certifications.

About the Company

We're not just building tech, we're shaping the future of digital compliance. At fiskaly, we believe in trust, shared vision, and celebrating success together. If you want to make an impact where security meets innovation, we'd love to hear from you.

Your Way to fiskaly

• Step 1: Screening your resume. It all starts with your application and corresponding initial contact from our side. So please don't be shy to share honest details to pursue your desired career path with us!
• Step 2: Cultural Fit. We strive to create an awesome working environment and atmosphere at fiskaly. In the Cultural Fit, we find out if you and we are a good match.
• Step 3: Skill & Team Fit. If we are likeminded, you made it this far! Now it's time to explore your professional experience in depth in a chat with your future team lead and colleagues.
• Final step: Welcome aboard! We are a cultural fit, your skills fit the position and the department, and the team likes you. In addition to that, you accepted our job offer. We couldn't be happier!