Responsibilities
- Serve as the primary trust operations contact for EMEA and international teams supporting our customers, prospects, and partners.
- Handle inbound security requests including security questionnaires, and customer-initiated assessments — using and enhancing AI-assisted assurance tooling to improve response speed, accuracy, and consistency.
- Help build and maintain the knowledge base that powers AI-assisted responses, keeping control mappings current and continuously improving answer quality against Absolute’s actual control environment.
- Partner with Sales, Customer Success, Engineering, and Legal to support deals involving security review cycles.
- Support customer trust reviews, due diligence activities, and regional customer trust escalations.
- Track and report on regional assurance performance metrics.
- Support the execution of an internal IT control self-assessment program, conducting assessments of technical, administrative, and physical controls and contributing observations on their design and effectiveness.
- Coordinate external audit engagements (SOC 2, ISO 27001, and others), liaising with third-party auditors and ensuring audit artifacts are well-organized and submitted on time — using AI-enabled platforms to automate evidence collection, monitor control health, and reduce manual preparation effort.
- Perform periodic gap assessments against relevant frameworks and contribute to remediation planning.
- Support GDPR and regional regulatory compliance requirements.
- Maintain regular reporting on compliance posture, audit risk, and audit-related change management for team leadership and key stakeholders.
- Participate in and help advance Absolute’s risk management program, including risk identification, assessment, and treatment activities.
- Contribute to risk reporting and escalate issues to team leadership as appropriate.
- Support vendor risk management activities, including assessing new vendors and coordinating re-assessments on a risk-tiered schedule.
- Complete vendor security assessments received from Absolute’s own suppliers and partners.
- Track remediation of identified vendor issues and maintain vendor assurance records.
- Collaborate across teams to maintain accurate, current policies, standards, processes, and operating procedures, including process-flow diagrams and SOPs.
- Identify and flag opportunities to reduce manual effort, improve audit readiness, and close gaps between requirements and how the business operates.
- Support AI-assisted workflows and operational efficiency initiatives.
- Drive regional process improvement initiatives and maintain operational metrics and reporting.
Requirements
- 3–5 years of experience in GRC, information security, audit, compliance, or trust operations — ideally in a SaaS or cloud-native environment.
- Exposure to external audit engagements (SOC 2, ISO 27001, or similar) and familiarity with how audit evidence is gathered and managed.
- Familiarity with GDPR and regional regulatory requirements.
- Experience completing customer-facing security questionnaires, RFPs, or similar assurance requests.
- Familiarity with key control domains: risk management, change management, incident management, identity & access management, and business continuity/DR.
- Strong written and verbal communicator — able to convey compliance and risk topics clearly to technical and non-technical audiences alike.
- Organized, self-motivated, and capable of managing multiple concurrent workstreams.
- Comfortable using AI tools (e.g., Claude, Copilot, or similar) to accelerate compliance research, draft documentation, and analyze gaps across frameworks.
- Bachelor’s degree in Computer Science, Information Systems, Law, or a related field — or equivalent professional experience.
Nice to Have
- Progress toward or interest in CISA, CRISC, or a related certification is an asset.
