Job title (Remote)

About the company

🧬 About us We’re iubenda, the team turning compliance into a growth engine. We help over 110K businesses all around the world build trust, boost performance, and grow without limits. Now part of team.blue (https://team.blue/**)**, we’re scaling privacy tech with confidence, creativity, and a little bit of attitude. Join a team that moves fast, thinks big, and makes privacy feel exciting again!

Your tasks

🎯 Mission & Core Purpose You’ll be our most senior security expert and the owner of iubenda’s security posture across AI, infrastructure, and code. You’ll set the direction, turn it into practical standards, and work closely with engineering, product, and leadership to make sure it’s applied. This is a hands-on individual contributor role with company-wide influence and direct access to senior leadership. You’ll also own the security, technology, and AI risks in iubenda’s Enterprise Risk Management (ERM) portfolio. From 1 March 2027, ERM is led by the Chief of Staff, and you’ll report to them. Until then, you report to the CEO.

💼 Key Responsibilities

• Own the security strategy and roadmap, and keep leadership informed on risks and priorities
• Define and drive the security architecture for our platform, cloud infrastructure, and internal systems
• Own AI security, including the safe and compliant use of AI tools internally (GDPR, EU AI Act), the security of AI features in our products, and our defences against AI-powered attacks, acorrding to standards and best practices (e.g. OWASP AI Testing guide)
• Build secure development practices into the engineering lifecycle, including code review standards, dependency management, and automated security testing
• Maintain security policies and lead threat modeling and risk assessments for new products, features, and vendors, including the ownership, access, and renewal of critical infrastructure vendors such as cloud, DNS, and certificates
• Lead incident response from a technical and coordination standpoint, update Incident response plan in accordance to the lesson learned outputs
• Own the cybersecurity, data protection, technology, and AI risks in the ERM portfolio. Keep each risk current (likelihood, impact, controls, next review), drive mitigation with the teams that own the work, and report status and escalations in the monthly ERM review led by the Chief of Staff
• Make sure every revenue-bearing platform has a current, tested disaster recovery and business continuity plan
• Keep company data and access under control, including approved storage and file sharing, credential and secrets management, and access removal at offboarding
• Work with Legal and Product on privacy engineering risks, such as tracking that fires before consent or customer data shared with third-party platforms
• Support customer security reviews, audits, and certifications, and represent iubenda with enterprise customers when needed
• Coach engineers on security and raise the bar across teams without formal authority

Requirements

👤 Your Profile****

• Significant experience in security engineering or architecture, ideally in a SaaS environment
• Deep knowledge of cloud infrastructure security and application security
• Hands-on understanding of AI and LLM-related risks, such as prompt injection, data leakage, and model supply chain
• Familiarity with frameworks like ISO 27001 and SOC 2, and with GDPR from a security perspective
• Experience managing risks in an enterprise risk register or framework such as ISO 31000, including scoring likelihood and impact and tracking mitigation to closure
• Experience building and testing disaster recovery and business continuity plans
• The ability to influence senior stakeholders and explain risk in business terms
• Fluent English

What we offer

🎁 Benefits

• Remote work🌴 Work 100% remotely, or from our offices, whatever works best for you. We're fully structured for seamless remote onboarding and collaboration (for those based in Mauritius, we expect weekly in-person collaboration).
• Company retreats🏔️ Once a year, we hold fully paid, week-long retreats in beautiful locations such as Venice, Athens, and Palermo, where we work, connect, and recharge together.
• All-in-One flex budget 💳 A yearly sum of up to 1,000€ that you can tailor to your personal needs, whether it’s private health coverage, meal vouchers, childcare, learning, fitness, or other lifestyle choices. You can invest in what matters most to you (total amount, availability of specific services, payment method, and taxability may vary depending on local regulations).
• Work equipment supply scheme💻 A policy designed to help you create the perfect setup and perform at your best.
• Collaborative, multicultural team🧩Join a team of talented, international colleagues in a friendly, open, and highly collaborative environment.

Other

🌐 Location We're a remote-first company. You can work from wherever you're most productive in the world. For those based in Italy or nearby, if you enjoy a mix of remote and in-person work, you can also take advantage of our offices in Milan and Bologna. For those based in Mauritius, while you can work from anywhere on the island, we encourage regular in-person collaboration at our Port Louis office, typically once per week. Wherever you’re based, this role involves working within a ±1 CET time frame to stay closely aligned with the rest of the team and make collaboration easy.

Please send your CV in English.Want to know more about iubenda? Check us out at: http://iubenda.com | LinkedIn | Facebook | Twitter

Privacy By applying, you hereby declare that you have read and understood our privacy policy (https://www.iubenda.com/privacy-policy/96274994). To ensure a fair selection process and verify your identity, we may ask you during video interviews to disable virtual backgrounds or filters, show an ID, or answer follow-up questions. If you need an alternative arrangement, please let us know, and we will accommodate.