Set the security requirements for identity, device, and endpoint management, and audit that IT operations meet them. * Working knowledge of identity, endpoint, and M365-style device management, strong enough to set requirements and judge whether IT operations meets them. You'll own SPREAD's information security and compliance program, from ISO 27001, SOC 2, and TISAX audit cycles through to the risk register, policies, and vendor assessments that back them. * Present ISMS status, risk posture, and audit results to leadership every cycle. * Maintain and evolve risk registers, security policies, and vendor security assessments as the company grows. * Comfort owning a risk register, a policy set, and vendor security assessments end-to-en
mehr