Information Security & Compliance Lead

About the role

Join Context& as a central figure in building and maturing information security and compliance across a Microsoft‑focused consultancy. Reporting to the CIO, you will shape governance, audit preparation and policy implementation while collaborating closely with the Cyber Security Specialist.

Key responsibilities

• Drive and evolve the company’s information security, compliance and governance framework, supporting ISO 27001, ISMS and related controls.
• Prepare for and coordinate internal and external audits (e.g., ISAE 3000/3402, SOC 2) and follow up on findings.
• Translate regulatory requirements such as GDPR, NIS2, and customer‑specific mandates into concrete processes and controls.
• Manage security questionnaires, due‑diligence requests and audit dialogues with customers.
• Report security status, risks and maturity to the CIO and other stakeholders.

Required profile

• Proven experience in information security, compliance, governance, audits and IT risk management.
• Ability to create structured policies, procedures, risk assessments and evidence documentation.
• Strong communication skills to make security concepts understandable for both technical and non‑technical audiences.

Required skills

• ISO 27001 implementation and control management
• ISAE 3000 / ISAE 3402 or SOC 2 audit experience
• Knowledge of GDPR, NIS2 and related regulatory frameworks
• Familiarity with Microsoft 365, Azure and Entra ID security environments

What we offer

• Work with the latest Microsoft technologies, including AI‑integrated solutions.
• Continuous competence development through certifications, courses and knowledge sharing.
• Flexible work arrangements with the possibility of remote work.
• A collaborative culture built on trust, innovation and strong team relationships.