Job summary
This role is responsible for managing customer trust around information security within a high-growth SaaS environment. The Information Security Lead acts as the main security contact for the sales process, addressing complex security questionnaires and ensuring transparent and accurate communication about the company's security controls. The position requires close collaboration across teams including sales, engineering, legal, and operations to maintain and improve security processes and compliance frameworks such as SOC 2 and ISO 27001, supporting smoother enterprise deal cycles and fostering customer confidence.
Location and work setup
- Location
- Oslo
- Work setup
- Hybrid
Responsibilities
Lead the customer security communication by responding to detailed questionnaires and assessments during sales cycles, ensuring buyers receive reliable and clear information. Manage and update the customer trust center and maintain a knowledge base with approved security answers. Collaborate with internal teams including sales, customer success, legal, engineering, and operations to review security contract terms, mitigate risks, and streamline security processes. Participate in internal information security management system (ISMS) and governance, risk, and compliance (GRC) activities to align customer information with actual security controls. Coach commercial teams to improve their ability to communicate security topics clearly and efficiently. Identify recurring customer security concerns and work with product, security, and sales enablement teams to address them. Utilize automation and AI tools to enhance the speed and accuracy of security responses.
Qualifications
Proven expertise in information security governance and compliance, particularly with SOC 2 and ISO 27001 standards, preferably in a SaaS or technology company. Experience engaging directly with customers on security matters, capable of explaining technical controls within a risk framework. Skilled in managing security questionnaires, contract reviews, and using automation or AI to improve processes. Strong collaboration skills combined with the ability to translate complex security concepts into clear, actionable guidance for diverse stakeholders. Comfortable working in ambiguous situations and driving continuous process improvements.