Cleafy is a SaaS company, a team of fraud hunters, cybersecurity experts, data scientists, and software engineers that since 2014 share the same dream: make technology a safer place. Every day, we work side by side with our customers to help them safely navigate digital opportunities, while growing their business. Cleafy has recently secured a €10 million Series A capital raise from United Ventures to fund its international expansion. **Responsibilities**: - Develop, implement, and maintain security policies, procedures, and standards in alignment with ISO27001, SOC2, and other relevant frameworks
- Conduct regular internal audits and assessments to ensure compliance with security standards and regulatory requirements.
- Coordinate external audits and certification processes
- Assist with customer audits and address any security concerns or queries
- Identify, assess, and manage security risks, providing recommendations for mitigation
- Maintain documentation related to security policies, procedures, and compliance activities
- Collaborate with various departments to ensure security and compliance requirements are met
- Stay current with changes in security regulations and industry standards, particularly those relevant to the financial services industry (DORA, NIS2) **Requirements**: - BS/MS in Information Security, Computer Science, or a related field
- 3 to 5 years of experience in a GRC role with a focus on ISO27001, SOC2,



and other relevant standards
- Strong understanding of risk management principles and practices
- Experience with security audits, compliance assessments, and certification processes
- Excellent analytical, organizational, and communication skills
- Ability to work independently and collaboratively in a team environment
- Detail-oriented with a strong commitment to maintaining high standards and work ethic
- Fluent spoken and written English **Plus**: - Relevant certifications such as ISO27001 Lead Auditor/Implementer, CISA, ITIL, etc.
- Proficiency in Spanish, French, or German, both written and spoken **Why you should join Cleafy**: - Hybrid or remote job. You choose!
- Attractive packages based on skills and experience
- International environment with significant challenges to be met every day
- Personalized support to accelerate your professional growth
- Latest technologies and being encouraged to bring your flair to the role Working at Cleafy means being part of a group of people that support, respect, and inspire one another, no matter what. That's why we have been certified by Great Place to Work® (find our page on bit.ly/BestWorkplace-Cleafy). We are literally changing the status quo in fighting online fraud, and we need great people for that. Do you have what it takes to be part of the Cleafy family?

📌 Security Expert (Milano)
🏢 Cleafy
📍 Milano