Operative makes advertising and content work for media companies. Hundreds of the world’s top media organizations rely on Operative's solutions to automate digital and linear revenue workflows, streamline ad operations, and deliver audiences and outcomes to their buyers. And with powerful tools for content rights & management, Operative has a comprehensive product portfolio to help media companies thrive.

300+ media companies as clients, $50+ billion in revenue processed, 25,000+ worldwide users.

No other software company in AdTech space, brings a comparable depth of experience to create truly innovative software that performs across all platforms, revenue models and business units. We believe in attracting and developing diverse people who are skilled, ambitious, compassionate, and curious to learn.

We are looking for a Senior Security (Governance, Risk and Compliance) Specialist with at least 3 years of experience in relevant security domains.

Key Responsibilities:

• Develop and mature policy and control framework supporting various standards, including ISO 27001:2013, SOC 2, GDPR, and relevant data protection laws
• Collaborate with different departments to implement the control framework for the above standards
• Develop automated security and compliance capabilities in support of existing organizational processes
• Lead Operatives customer-relevant processes including questionnaires, sales support, and security contract negotiations
• Work closely with the internal engineering and IT departments to implement technical and procedural controls
• Maintain and improve the Vendor risk management program
• Maintain and improve the Access management program
• Lead Security Awareness efforts including phishing simulations, training and communication

Qualifications:

• 3 year of experience in relevant security domains (compliance, security risk management, auditing, etc.)
• Solid understanding of security principles in cloud environments
• Understanding technical aspects of IT systems - operating systems, networking and cloud technologies
• Knowledge of ISO 27001:2022, NIST CSF and SOC 2 audit and reporting
• Experience in working with diverse set of stakeholders in an organization
• Relevant security certifications such as CRISC, CISA, CISM, or CISSP are an advantage
• Experience in developing security policies and procedures
• Fluent English speaker

What we offer:

• Hybrid Home/Office working model
• Unlimited Udemy for Business Access
• Company Bonus Scheme
• Competitive Leave Allowances
• Recognition Program
• Wellness Program

If you think big, if you are skilled, dedicated, and passionate about what you do, come join us in our vision to power how media companies work. We’re building the future of media.

Please note that the workplace type is Hybrid and attendance is required depending on your proximity to our office in Craiova.

Please apply with your CV in English.

We offer a competitive salary and benefits package. All offers are conditional on references, verification of the right to work in Romania, and successful background screening checks. If you’re interested in joining a fast-growing, innovative company and you meet the above requirements, don’t hesitate to apply today!

Operative is a merit-first, equal-opportunity employer; diverse applications are encouraged.

Operative cares about your privacy and protecting your data. By submitting an application for a position with Operative, you acknowledge that you have read the following and consent to how Operative treats your data: 1) the Candidate Privacy Policy available at https://www.operative.com/candidate-privacy-notice/ (or if you are a candidate from Israel the Candidate Privacy Notice (Israel), available at https://www.operative.com/candidate-privacy-notice-israel/, and 2) the Candidate Notice for Data Transfer and Retention available at https://www.operative.com/candidate-notice/.