Cybersecurity Manager
About this role
Cybersecurity Manager
Location: Remote - Europe (European time zones)
About FullEnrich:
Every go-to-market motion runs on data, but no single provider has ever had complete coverage. We solve that problem: instead of relying on a single data source, we orchestrate 20+ premium providers around the world, automatically querying them and verifying data in real-time until we find the best available contact information. The result is industry-leading coverage and data quality, helping sales and GTM teams connect with the right people faster.
What started as a better way to find emails and phone numbers has grown into a broader vision: becoming the trusted GTM data infrastructure layer powering modern revenue teams and AI agents. Today, more than 6,000 customers, including companies like AWS, Deel, HubSpot, Clay, Intercom, Unify,and Artisan, trust us to power their prospecting and enrichment.
Founded in Paris and now headquartered in San Francisco, we're a team of 50+ people across the US, Europe, LATAM, and Israel, growing quickly and building with speed, ownership, and ambition. That's where you come in.
The Role:
You'll be joining as our Cybersecurity Manager, reporting directly to our VP of Engineering.
At FullEnrich, security and privacy aren't just compliance requirements; they're fundamental to our product and the trust our customers place in us. As we scale, we're looking for someone to take ownership of our security, compliance, and corporate IT programs, ensuring we continue to protect our customers, strengthen our infrastructure, and meet the expectations of increasingly sophisticated enterprise clients.
As our first dedicated security and IT hire, you'll have the opportunity to build and shape this function from the ground up. You'll own our security strategy and compliance roadmap, working closely with Engineering, leadership, and teams across the business to implement practical, scalable controls. Our engineers build and operate the platform, while you'll define, oversee, and continuously improve the security measures that protect it.
We're already SOC 2 compliant, with ISO 27001 and additional certifications on the horizon. Operating across multiple regions and working with 20+ data providers also brings interesting challenges around data privacy, vendor security, and international regulations.
This is a hands-on role with significant autonomy, direct exposure to leadership, and the opportunity to build a security function that grows alongside the business.
What You'll Do:
Security & Infrastructure
Own and continuously improve our application and infrastructure security posture, partnering with Engineering to implement and maintain effective security controls.
Lead our vulnerability management program, including external penetration testing, vulnerability disclosure, and remediation tracking.
Identify, assess, and prioritize security risks, ensuring vulnerabilities are addressed based on their potential business impact.
Compliance & Certifications
Own our security compliance program end to end, maintaining SOC 2 and leading future certifications such as ISO 27001.
Manage ongoing evidence collection, auditor relationships, control assessments, and remediation activities.
Develop and maintain a scalable compliance roadmap aligned with business growth and customer requirements.
Security Governance & Risk Management
Develop and maintain security policies, risk assessments, and our company-wide risk register.
Lead regular access reviews, security awareness initiatives, and incident response preparedness.
Coordinate security incidents and drive continuous improvements to our security processes and controls.
Corporate IT & Identity Management
Own our corporate IT security framework, including device management (MDM), identity providers, SSO, and SaaS access controls.
Oversee secure employee onboarding and offboarding, account provisioning, and hardware inventory management, working with our operational IT team on execution.
Improve and automate IT security processes to ensure they remain reliable and scalable as the company grows.
Data Privacy & Vendor Security
Oversee privacy operations, including data subject requests, vendor data processing agreements, and cross-border data transfers.
Ensure our practices align with applicable privacy regulations, including GDPR and US state privacy laws, coordinating with our DPO and relevant stakeholders.
Build and maintain a risk-based vendor security assessment process across our data providers and wider SaaS ecosystem.
Customer Trust & Enterprise Security
Own the security due diligence process for enterprise customers, including questionnaires, audits, and security reviews.
Maintain our customer-facing security documentation, trust page, and audit report distribution.
Partner with Sales and leadership to turn security and compliance into a competitive advantage, helping customers move through procurement and security reviews with confidence.
What Success Looks Like:
By 3 months
You've taken full ownership of our existing SOC 2 compliance program, with evidence collection, control monitoring, and auditor coordination running smoothly.
You've assessed our current security posture, completed an initial risk assessment, and identified the highest-priority improvements across infrastructure, corporate IT, and identity management.
You've established an effective process for handling enterprise security questionnaires and customer due diligence, with turnaround times measured in days rather than weeks.
You've developed an initial 12-month security roadmap covering remediation priorities, penetration testing, incident response, and future certifications.
By 6 months
You've implemented improvements to our highest-priority security and IT controls, including identity management, endpoint security, and access governance.
You've established a repeatable vulnerability management process, with penetration testing completed or underway and remediation tracked through to resolution.
You've strengthened our incident response readiness through documented procedures and a tabletop exercise.
You've implemented consistent processes for vendor security reviews and privacy operations, ensuring risks are assessed and regulatory obligations are managed effectively.
By 12 months
Our SOC 2 compliance program is operating as a continuous, audit-ready process, with renewals running smoothly and minimal disruption to the wider business.
You've made measurable progress against our security roadmap, including advancing ISO 27001 or other certifications agreed with leadership.
Our corporate IT and security processes are reliable, scalable, and embedded into everyday operations.
Security is actively supporting business growth, with faster enterprise due diligence, stronger customer confidence, and fewer security-related obstacles in the sales process.
What We're Looking For:
Proven experience owning a security and compliance program end to end, including SOC 2 or ISO 27001 certification, auditor management, evidence collection, and control remediation.
Strong understanding of application and cloud infrastructure security, with the ability to partner effectively with Engineering teams to identify risks and implement practical controls.
Hands-on experience with corporate IT security, including MDM, identity providers, SSO/SCIM, SaaS access management, and employee lifecycle processes.
Solid knowledge of data privacy regulations, particularly GDPR, and experience navigating international data protection requirements and cross-border transfers.
Experience managing security governance processes, including risk assessments, vulnerability management, incident response, and security policies.
A proactive, hands-on approach, with the ability to balance strategic thinking with practical execution in a fast-moving environment.
Excellent communication skills in English, with the confidence to work across technical and non-technical teams, engage with auditors, and represent security in enterprise customer discussions.
Nice to Haves
Experience working in a data-heavy or API-first SaaS business, particularly data enrichment, data brokerage, or similar industries.
Security management certifications such as CISM (Certified Information Security Manager) or equivalent.
Experience working as, or closely alongside, a Data Protection Officer (DPO).
Experience supporting enterprise sales processes through security due diligence and customer-facing security reviews.
French language skills or proficiency in another European language.
The Hiring Process:
Intro to FullEnrich with our Talent Team (30 min) – A chance to learn more about you, introduce FullEnrich and the role, and explore whether there's a mutual fit.
Practical case on a real security & compliance scenario from our world (1 hr) – A chance for you to showcase how you think and work.
Deep dive with the VP of Engineering (1 hr) – A chance to talk through your approach, strategy, and how you'd operate in this role.
Final with the CEO (45 min) – A chance for you to meet our CEO, Ben, and have a conversation around FullEnrich's values, ambitions, how we work, and what we're building together.
Benefits:
Your benefits package will reflect the requirements and market practices of the country in which you're employed, including applicable leave, healthcare, retirement and wellbeing benefits.
Full details will be shared during the hiring process.
FullEnrich is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, gender identity, sexual orientation, and will not be discriminated against on the basis of disability.
Find Jobs in France on Arbeitnow