About the role
Accounting firms trust Sumary with their clients' books, some of the most sensitive data a business has. As our Compliance & Security Engineer, you will make sure that trust is deserved, and that we can show it.
The role is hands-on in both halves. You will secure our code, infrastructure and AI agents, and you will run our compliance programme, from SOC 2 and ISO 27001 to GDPR and the security reviews our customers send us. You will be based in our Copenhagen office.
What you'll do
- Own our security programme across code, infrastructure, identity and our AI agents
- Lead our SOC 2 and ISO 27001 programmes, from controls and evidence to audits
- Own GDPR compliance, data processing agreements and how we handle personal data
- Answer customer security questionnaires and reviews, and make them faster each time
- Run threat modelling with engineers on new features, and review changes that cross a trust boundary
- Build monitoring, incident response and vendor reviews into how we work
What we're looking for
- 3 to 5 years of experience in security engineering, with hands-on compliance work
- Experience taking a company through SOC 2 or ISO 27001
- Working knowledge of GDPR
- Comfort reading code and infrastructure, and fixing what you find
- Clear writing for engineers, auditors and customers alike
Nice to have
- Experience securing LLM applications and AI agents
- Experience in fintech or another regulated industry
- Experience automating compliance evidence