Information Security Officer

📋 Description

• Future-proof SOC 2 for AI era with monitoring and audit readiness
• Elevate Trust Center to self-serve for faster customer answers
• Manage GDPR/CCPA across data lifecycle to lead privacy posture
• Drive IAM to zero-touch; turn incidents into engineering insights
• Create a searchable, cross-team view of Ona's compliance posture
• Deliver 30-day milestones: SOC2 plan, controls, evidence

🎯 Requirements

• Owned SOC 2 Type II program end-to-end
• Hands-on AWS security experience: triage first, escalate second
• Worked in a technical product company where understanding the product was part of the job
• Managed access management at organizational scale with automation bias
• Familiar with GDPR, CCPA, or equivalent privacy frameworks at an operational level
• Security certifications (CISSP, CISM, CCSP) noted, not required

🎁 Benefits

• Flexible paid time off including holidays that are most meaningful to you
• Employee-friendly equity terms (extended exercise)
• Health insurance (country-specific)
• Retirement (country-specific)
• Wellness allowance
• Premium work-from-home equipment