[Hiring] Compliance Manager @Duvo Inc

Role Description

You are the function owner and, for now, its sole occupant. You report to the Head of Engineering and work daily with our Security Lead - you jointly own policies, access reviews, incident evidence and our Trust Center configuration.

You are succeeding in the role when a buyer, an auditor, or a regulator’s customer can get an accurate, evidenced answer about the Duvo the first time they ask. You decide what ships in a questionnaire, whether a vendor passes review, and how the answer library is structured and governed.

What you'll own

• The Q&A library - our source of truth.
• Customer security reviews.
• The audit and certification programme.
• Third-party and subprocessor risk.

Qualifications

• You've run a certification programme end to end.
• You write answers that survive a hostile reviewer.
• Third-party risk in practice.
• Evidence discipline.
• Judgement about escalation.
• You use AI tooling properly.
• Plain writing.

Requirements

• Have dealt with financial services or telco buyers, and know why DORA and NIS2 changed what they ask vendors for.
• Have worked on AI governance or ISO 42001 specifically.
• Have run a GRC platform Vanta, Drata, Mycroft, Segregato or similar, rather than just filled one in.
• Have sat on the vendor side of the table, as a processor answering to controllers, rather than only in-house.

Benefits

• Unlimited AI budget.
• Autonomy to do your best work.
• A real AI product with real customers.

How we work

• Initiative-driven.
• Customer-obsessed.
• Iterative by default.
• AI-first leverage.
• Direct feedback.
• Autonomy with accountability.

How we hire

• Interview with our Security Lead. (1h)
• Interview with our Head of Engineering. (30 minutes)
• Final round. Meet the team in Prague.