Security Compliance Officer

Are you ready to protect the security and privacy of our community of practitioners and patients while ensuring the best user experience of the top European healthcare products? If so, we are looking for a skilled, passionate Security Compliance Officer for Doctolib Italy seeking challenges in technology and serving societies with privacy and ethics.

**Context**:
**Reporting to Doctolib's Group Security Compliance Officer you will be part of a motivated, result-oriented and united global security team, with highly complementary profiles and expertise in areas such as product security, platform security and corporate security and of course security governance, risk and compliance.**:
**What you will do**:

- Be **the** information security advisor, expert and auditor, internally and externally for all security compliance topics for Doctolib Italy
- Lead internal and external security audits and certifications regarding Doctolib Italy
- Be the second line of defense for Doctolib Italy and ensure compliance of the first line of defense with our internal security policies and procedures.
- Take part in Italian customer audits, provide support to Italian sales and pre-sales regarding all security related topics
- Cooperate with our Italian Legal and Privacy department on technical and regulatory security issues, e.g. technical measures for GDPR, Schrems II, etc.
- Support Italian procurement processes for RFPs and contractualization
- Provide awareness and training sessions to our Italian employees
- Observe and evaluate applicable Italian security certifications, standards and best practices
- Establish and maintain relationship with the Italian National Cybersecurity Agency (Agenzia per la Cybersicurezza Nazionale) and other important national stakeholders
- Be a valuable member of Doctolib's global security compliance team
- Observe and evaluate applicable global, EU and regional security standards.
- Derive requirements and internal controls from regulation and best practices, e.g., ISO27000 series, OWASP guidelines etc.
- Create, maintain and contribute to our internal security control set and complete the global 2nd line of defense for security compliance.
- Be part of global internal and external security audits and assessments

**Your profile**:
**You are a senior and experienced security professional and have worked in a similar role as security officer or consultant on at least three of the activities described below (mandatory)**:

- Acting as an information security expert and auditor on technical measures for regulations like the GDPR.
- **Implementation, maintaining or auditing an ISMS according to ISO27001.**:

- Working in a security or IT compliance team internally as auditee or externally as an auditor on attestation programmes such as PCI-DSS or SOC2.
- You are curious, very autonomous, flexible, rigorous, enthusiastic, passionate and have a taste for teamwork.

**Fluent written and spoken Italian and English is mandatory.**:
**The interview process**:

- Recruiter Call (30 min)
- interview with the hiring manager (1 hour)
- Technical Interview with the Security Compliance team (1h30)
- Interview with our CISO (45 min)
- Offer

**Details**:

- Contract: full-time position
- Start: as soon as possible
- Location: based in our Italian office in Milan (relocation package if needed)
- Package: attractive salary depending on profile

**About Doctolib**:
Founded in 2013, Doctolib is the fastest growing e-health service in Europe.

We provide healthcare professionals with services to improve the efficiency of their organization, transform their patients' experience, and strengthen cooperation with other practitioners. We help patients to access care easily, with online appointment scheduling, teleconsultations and receiving their prescriptions online.

Doctolib is also a group of passionate entrepreneurs who are transforming the healthcare industry and share the Serve, Care, Act, and Learn values.

At Doctolib, we don't just accept diversity, we respect and celebrate it We're proudly committed to equal employment opportunities regardless of your gender, religion, age, sexual orientation, ethnicity, disability or place of origin. We take care of each other and are grateful for each Doctoliber's contribution to our mission