Security Compliance Officer

• Own and maintain Corti security governance model across ISO 27001, ISO 27017, SOC 2 and other relevant frameworks, including a clear control inventory and ownership map. - Translate frameworks and customer requirements into concise policies, playbooks, checklists and acceptance criteria that fit naturally into tech docs, release processes and change management. - Plan, manage and follow up on internal and external security audits and assessments, address any areas of non compliance and communicate status and findings to leadership, auditors and teams. - Drive the use of compliance automation tools (e.g. Drata) and internal scripts, and monitor indicators such as device compliance, policy acceptance, training completion and access reviews, coordinating remediation with the responsible teams. - Maintain a live security risk register, including risk acceptance, mitigation plans and regular reviews with Product, Platform and Governance team members. - Partner with Platform and other engineers to ensure that policies and control objectives are reflected in CI or CD pipelines, Infrastructure as Code and cloud configuration baselines, manage incidents and review security impactful changes at a governance level so they remain aligned and auditable. - Act as a trusted advisor on secure ways of working and provide answers to customers and stakeholders on Corti’s security. What you bring:

• Strong understanding of security and data protection laws, regulations, and standards. - Proven impact in risk reduction and safeguarding sensitive data, protecting brand reputation and customer trust. - Practical exposure to modern engineering environments, for example working closely with platform or DevOps teams, and familiarity with CI or CD, Infrastructure as Code, and cloud platforms such as Azure. - A builder mindset for governance, you enjoy designing processes, templates, and automations that make it easy for teams to do the right thing. - A proactive, ownership-driven approach to building and coordinating company-wide compliance programs. - Comfortable using and configuring compliance tooling such as Drata, and eager to experiment with new automation tools to reduce manual work. - Effective partnership with external auditors, including evidence collection, issue tracking, and clear internal communication of findings. - Clear communicator who can adjust language to the audience, from technical deep dives to concise leadership updates. - Deep familiarity with keeping organizations up-to-date with evolving regulatory requirements. - Strong project management discipline leveraging tools to plan, track, and communicate workload and progress to stakeholders and leadership

• Previous familiarity with other compliance subjects of our Governance team is a plus, as it will facilitate better team work. For example, working with sensitive data, AI or in a healthtech/medtech company. - Previous hands-on engineering experience is a plus, for example as a developer, platform engineer, or DevOps engineer, and you are comfortable reading code or configuration to understand how controls are implemented. - A bachelor’s degree in Computer Science/Information Technology, or solid experience in security compliance or information security. - Previous commercial experience is a plus, for example in a sales or marketing role, and you are comfortable in commercial conversations. - Previous experience designing small automations or configuration improvements that strengthen controls and make evidence collection and reporting easier for teams is a plus. Life at Corti

• You will be reporting to the VP of Governance and Market Access

• The position is full-time and starts as soon as possible. - Hybrid working environment in our Copenhagen Office

• Equipment provided by Corti

Ready to dive into the world of Corti? Hit that 'Apply' button, and let's start working together on reshaping the dialogue in healthcare, making a real difference for millions of patient outcomes around the world.

*🤝 Bringing in top talent from all backgrounds is crucial in our pursuit to improve the world of healthcare. We encourage applications from all people and do not discriminate based on race, religion, national origin, gender, sexual orientation, age, and/or disability status.*

At Corti, experience comes in many forms, and we’re passionate about creating teams with a multitude of perspectives! If you believe your experience is close to what we’re looking for but not an exact match, we still hope you’ll consider applying!