Compliance Manager
Duvo Inc · Remote · EU/UK - Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote
- Sole compliance owner
- SOC 2 & ISO 27001
- AI operations platform
- Final round in Prague
You will be the sole owner of Duvo’s compliance function, managing audits, evidence libraries, and third-party risk. Working closely with the Security Lead, you ensure accurate, evidenced answers for buyers, auditors, and regulators across global enterprise deals.
What you'll do
- Maintain the Q&A library as the single source of truth for compliance facts
- Manage end-to-end customer security reviews and questionnaire responses
- Run annual audit cycles for SOC 2, ISO 27001, ISO 42001, and NIS2
- Operate the ISMS and AIMS alongside the Security Lead
- Own third-party risk management and subprocessor list accuracy
- Ensure evidence is captured proactively rather than reconstructed later
What you'll need
- Experience running certification programs like SOC 2 or ISO 27001 end-to-end
- Ability to write precise, evidenced answers for hostile reviewers
- Practical experience building or running vendor review processes
- Strong discipline in capturing audit evidence during daily work
- Judgment to escalate questions to Engineering, Security, or Legal
- Comfort using AI tooling to automate parts of your workflow
- Excellent plain writing skills for time-pressed readers
Nice to have
- Experience with financial services or telco buyers and DORA/NIS2
- Background in AI governance or ISO 42001 specifically
- Hands-on experience operating GRC platforms like Vanta or Drata
- Previous experience as a processor answering to controllers
Stack
- SOC 2
- ISO 27001
- ISO 42001
- GDPR
- NIS2
- Vanta
- Drata
How you'll work
- Standalone role with no direct reports
- Reports to the Head of Engineering
- Collaborates daily with the Security Lead
- Final interview stage takes place in Prague
What you get
- Unlimited budget for AI tools and automation
- Autonomy to set up mentorships or customer visits
- Work on a live AI product with enterprise customers
Hiring process
- Interview with Security Lead (1 hour)
- Interview with Head of Engineering (30 minutes)
- Final round meeting the team in Prague
- Target timeline of two weeks to close