SlipstreamJobsFresh Startup & VC-Backed Jobs

Information Security & Compliance Engineer

OfficeRnD - Sofia, Bulgaria - Hybrid - posted 2026-09-23

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

OfficeRnD is a SaaS platform founded in 2015 that helps workspace operators and teams manage flexible and hybrid work. The company operates globally with offices in Sofia, the US, UK, and Australia. In this role, you will lead information security and compliance initiatives for a critical SaaS platform serving customers worldwide. You will be central to ensuring the platform remains secure and trustworthy for clients. Key responsibilities: - Lead identification and mitigation of vulnerabilities within the security architecture, advancing defense mechanisms against emerging threats - Maintain and exceed compliance with SOC 2 and ISO 27001 standards, driving continuous improvement in security practices - Direct security dialogue with customers and partners, reinforcing OfficeRnD's commitment to data security and integrity - Conduct comprehensive internal audits, access reviews, and security training sessions, including phishing awareness programs - Implement and refine risk management strategies to proactively address potential security threats - Develop, enforce, and periodically review information security policies and procedures aligned with industry best practices and regulatory requirements - Serve as the primary information security advisor within the organization, promoting a proactive approach to data protection and compliance Requirements: - 2+ years of direct experience in information security and compliance; SaaS environment experience is a significant advantage - Experience achieving and upholding SOC 2 compliance and ISO 27001 certification, with understanding of critical success factors - Expertise in managing security-focused communications with customers and partners, able to convey complex security measures accessibly - Strong knowledge of internal auditing, risk assessments, and security training methodologies - Commitment to staying current on latest security trends and technologies; professional certifications (CISSP, CISM, CCSP) highly regarded - Excellent collaboration and communication skills, capable of leading cross-departmental initiatives and instilling security-first mindset - Proficiency in spoken and written English

Similar roles