Information Security Analyst – ISO 27001 Focus

About the role

We are seeking an Information Security Analyst to join Didomi’s Security & IT team. The role will serve as the operational backbone of our ISO 27001 program, ensuring the company remains audit‑ready year‑round while driving automation and continuous improvement of compliance processes.

Key responsibilities

• Maintain and enhance the ISO 27001 management system, supporting internal, surveillance and recertification audits.
• Collect evidence, track corrective actions, and manage non‑conformities to keep the program effective.
• Execute recurring security activities such as vulnerability scans, quarterly access reviews, risk assessments, business continuity tests and policy reviews.
• Tri­age findings from AWS GuardDuty, Inspector and other tools, define remediation priorities and follow through to closure.
• Conduct periodic access reviews across critical platforms (Google Workspace, AWS, Slack, JAMF, GitLab, GitHub, internal applications) and report findings.
• Assist the security team in evaluating new tools, vendors and SaaS applications for security and compliance risks.
• Support security questionnaires, RFPs and customer due‑diligence requests, and contribute to initiatives like AI governance and SaaS governance.

Required profile

• 3+ years of experience in GRC, compliance or information security, preferably in a SaaS or technology environment.
• Strong knowledge of ISO 27001, Annex A controls and audit processes.
• Hands‑on experience with vulnerability management and access governance.
• Proactive mindset focused on automation, AI tooling and continuous process improvement.

Required skills

• ISO 27001
• Vanta platform
• AWS GuardDuty
• AWS Inspector
• Google Workspace
• AWS
• Slack
• JAMF
• GitLab
• GitHub
• MFA
• SSO