Information Security (Remote-USA East Coast)

Information Security (Remote-USA East Coast) About Us: DeepJudge is Switzerland’s leading AI and ICT scale-up, transforming how law firms and legal departments access and leverage their knowledge. Founded by former Google search engineers with PhDs in AI from ETH Zurich, and backed by top-tier Silicon Valley investors, we are building the intelligence layer that powers the legal industry. Every firm can license the same AI models, but no two firms share the same institutional knowledge. Decades of experience, work product, and precedent are often trapped across systems, underused and inaccessible. DeepJudge makes this expertise instantly available through world-class enterprise search and AI infrastructure, enabling firms to automate workflows, build knowledge-powered applications, and turn experience into a lasting advantage. Our technology is trusted by many of the world’s leading law firms, including Freshfields, Gunderson Dettmer, Holland & Knight, Arent Fox, and Cozen O’Connor. Headquartered in Switzerland with a growing team across North America, we are expanding rapidly and shaping the future of how professional knowledge is discovered and applied. At DeepJudge, we move fast, think rigorously, and care deeply about what we build. We combine cutting-edge research with close collaboration with our clients to deliver solutions that truly make an impact. If you want to be part of a team defining how AI transforms high-stakes knowledge work, this is the place to do it. About the role: As Security Operations Manager, you will shape the evolution of our security governance and compliance programs, building on our established excellence in these areas. This is a cross-functional position that sits at the intersection of compliance, customer trust, and business growth. You will own our ISMS, maintain and continuously strengthen our compliance with industry standards such as ISO 27001 and SOC 2, and bridge Legal, Engineering, and GTM so our security posture enables growth. A core part of your remit is also representing DeepJudge directly with enterprise clients, guiding prospects through InfoSec and compliance conversations, and building the kind of trust that unlocks and accelerates deals. What you’ll be doing: - Own and continuously elevate our ISMS in accordance with ISO 27001, SOC 2 Type 2, GDPR, and emerging AI governance standards, ensuring all policies, procedures, and controls are documented, implemented, and maintained - Manage the full lifecycle of security audits, certifications, and internal controls, ensuring we continue to stay ahead of requirements - Guide enterprise prospects and clients through InfoSec and compliance conversations as part of the sales motion, and manage and streamline security questionnaires and due diligence reviews to ensure fast and accurate responses - Own our security whitepapers and InfoSec collateral, keeping them accurate, clear, and useful for both internal and external audiences - Partner with Legal and Compliance to define security policies and align on contractual obligations and regulatory requirements - Manage day-to-day compliance operations, including vendor risk management, third-party security reviews, background screenings, and security awareness training across the organization - Work hand-in-hand with Solution Architects and DevOps to translate security requirements into scalable implementation practices - Work with Engineering and business teams to ensure security and compliance requirements are understood, prioritized, and implemented effectively You might be a great fit if you: - Bring deep experience in GRC, compliance, or information security program management in high-growth technology companies in regulated industries, ideally in B2B SaaS, where building customer trust is central to the business - Have hands-on experience owning governance frameworks, risk management methodologies, and data protection regulations such as SOC 2 ISO 27001 end-to-end, ... (truncated, view full listing at source)