Information Security and Compliance Officer

Alohi SA, headquartered in Geneva, Switzerland, brings together a team of highly competent engineers that focus on merging state-of-the-art technologies with compelling user experience to simplify and enhance life for companies and people worldwide. The company provides SIGN.PLUS (a legally binding electronic signature) and FAX.PLUS (online faxing) services to over 2,000,000 customers worldwide.

At Alohi, we began our journey with an initial seed investment from Fongit “Fondation Genevoise pour l’Innovation Technologique” which is backed by the state of Geneva. But instead of relying on external funding to fuel our growth, we’ve chosen to bootstrap our way to success. This approach has allowed us to prioritize our customers and build products that truly meet their needs, without being beholden to outside investors. By remaining financially independent, we’ve been able to maintain our autonomy and agility, which have been key factors in our ability to innovate and stay ahead of the curve.

We are looking for an experienced Information Security Officer/Compliance to design and enforce policies and procedures that protect our customers’ data from all forms of security breaches. You will be responsible for implementing policies and procedures aligned with standards, frameworks and regulations including ISO 27001, SOC 2, HIPAA and GDPR etc.

Responsibilities

• Conduct research and stay up-to-date on changes in relevant laws and regulations to identify compliance requirements
• Develop and continuously improve information security requirements, policies and procedures
• Provide guidance and training to employees on compliance policies and procedures
• Identify risks by role, software, information type, and other categories and define acceptable mitigation strategies
• Manage compliance audits and investigations
• Prepare and submit compliance reports to management and regulatory agencies
• Effectively respond to requests from relevant authorities or regulatory bodies in relation to security and compliance matters

Requirements

• Degree in business administration, law, or a related field
• Experience in the implementation of ISO 27001, SOC 1/SOC 2, HIPAA, and/or GDPR
• Solid knowledge of various information security frameworks
• Experience participating in compliance audits and investigations
• Excellent problem-solving and analytical skills
• Ability to educate a non-technical audience about various security measures
• Effective verbal and written communication skills
• Fluent in English (both written and spoken)