Cybersecurity Manager

Cybersecurity Manager Location: Remote - Europe (European time zones) About FullEnrich: Every go-to-market motion runs on data, but no single provider has ever had complete coverage. We solve that problem: instead of relying on a single data source, we orchestrate 20+ premium providers around the world, automatically querying them and verifying data in real-time until we find the best available contact information. The result is industry-leading coverage and data quality, helping sales and GTM teams connect with the right people faster. What started as a better way to find emails and phone numbers has grown into a broader vision: becoming the trusted GTM data infrastructure layer powering modern revenue teams and AI agents. Today, more than 6,000 customers, including companies like AWS, Deel, HubSpot, Clay, Intercom, Unify,and Artisan, trust us to power their prospecting and enrichment. Founded in Paris and now headquartered in San Francisco, we're a team of 50+ people across the US, Europe, LATAM, and Israel, growing quickly and building with speed, ownership, and ambition. That's where you come in.

The Role

You'll be joining as our Cybersecurity Manager, reporting directly to our VP of Engineering. At FullEnrich, security and privacy aren't just compliance requirements; they're fundamental to our product and the trust our customers place in us. As we scale, we're looking for someone to take ownership of our security, compliance, and corporate IT programs, ensuring we continue to protect our customers, strengthen our infrastructure, and meet the expectations of increasingly sophisticated enterprise clients. As our first dedicated security and IT hire, you'll have the opportunity to build and shape this function from the ground up. You'll own our security strategy and compliance roadmap, working closely with Engineering, leadership, and teams across the business to implement practical, scalable controls. Our engineers build and operate the platform, while you'll define, oversee, and continuously improve the security measures that protect it. We're already SOC 2 compliant, with ISO 27001 and additional certifications on the horizon. Operating across multiple regions and working with 20+ data providers also brings interesting challenges around data privacy, vendor security, and international regulations. This is a hands-on role with significant autonomy, direct exposure to leadership, and the opportunity to build a security function that grows alongside the business.

What You'll Do

Security & Infrastructure Own and continuously improve our application and infrastructure security posture, partnering with Engineering to implement and maintain effective security controls. Lead our vulnerability management program, including external penetration testing, vulnerability disclosure, and remediation tracking. Identify, assess, and prioritize security risks, ensuring vulnerabilities are addressed based on their potential business impact. Compliance & Certifications Own our security compliance program end to end, maintaining SOC 2 and leading future certifications such as ISO 27001. Manage ongoing evidence collection, auditor relationships, control assessments, and remediation activities. Develop and maintain a scalable compliance roadmap aligned with business growth and customer requirements. Security Governance & Risk Management Develop and maintain security policies, risk assessments, and our company-wide risk register. Lead regular access reviews, security awareness initiatives, and incident response preparedness. Coordinate security incidents and drive continuous improvements to our security processes and controls. Corporate IT & Identity Management Own our corporate IT security framework, including device management (MDM), identity providers, SSO, and SaaS access controls. Oversee secure employee onboarding and offboarding, account provisioning, and hardware inventory management, working with our operational IT team on execution. Improve and automate IT security processes to ensure they remain reliable and scalable as the company grows. Data Privacy & Vendor Security Oversee privacy operations, including data subject requests, vendor data processing agreements, and cross-border data transfers. Ensure our practices align with applicable privacy regulations, including GDPR and US state privacy laws, coordinating with our DPO and relevant stakeholders. Build and maintain a risk-based vendor security assessment process across our data providers and wider SaaS ecosystem. Customer Trust & Enterprise Security Own the security due diligence process for enterprise customers, including questionnaires, audits, and security reviews. Maintain our customer-facing security documentation, trust page, and audit report distribution. Partner with Sales and leadership to turn security and compliance into a competitive advantage, helping customers move through procurement and security reviews with confidence. What Success Looks Like: By 3 months You've taken full ownership of our existing SOC 2 compliance program, with evidence collection, control monitoring, and auditor coordination running smoothly. You've assessed our current security posture, completed an initial risk assessment, and identified the highest-priority improvements across infrastructure, corporate IT, and identity management. You've established an effective process for handling enterprise security questionnaires and customer due diligence, with turnaround times measured in days rather than weeks. You've developed an initial 12-month security roadmap covering remediation priorities, penetration testing, incident response, and future certifications. By 6 months You've implemented improvements to our highest-priority security and IT controls, including identity management, endpoint security, and access governance. You've established a repeatable vulnerability management process, with penetration testing completed or underway and remediation tracked