• Technical know-how: You should have 4+ years of security engineering experience and a good understanding of the technical aspects of security. While you don't need to be a master hacker, we are looking for someone with a technical security background
• Important: We are not looking for a “paper pusher”. We are looking for a team member who understands the technical side deeply
• Compliance leadership experience: You have successfully brought stakeholders together across the company to achieve accreditation in ISO27001 - even better if you also have experience in other frameworks like FedRAMP, ISO42001 etc
• Privacy knowledge: You have deep knowledge of GDPR and similar privacy-focused frameworks
• Excellent communication skills: We are sometimes customer facing, and assist the commercial functions in answering security-related questions coming from customers and prospects
• AWS: You have worked professionally with AWS and have a good understanding of the various security challenges that come with that
• Growth startup: You have been part of the journey for a fast-growing company

Desirable

• We are looking for an additional team member on the Synthesia Security Team - specifically on what we like to call the Corporate Security, or “CorpSec”, team
• At Synthesia, our CorpSec and AppSec teams work hand-in-hand to ensure the highest level of security in our operations across the company
• CorpSec owns the general Security Operations, and focuses on the protection of corporate information and assets, while AppSec is concerned with the security of our applications, working extremely close to our Product engineers
• We are looking for someone who can assist us in maintaining and improving our Security and Compliance Operations efforts
• Building out and maintaining Trust Operations
• Supporting our sales and legal teams in answering security questions coming from customers
• Participate in compliance management related efforts (SOC2, ISO27001 and ISO42001)
• Participating in security incident response efforts
• Be a reasonable, friendly and effective internal security advocate