Compliance and Business Operations Manager

The Role Accutics is hiring a Compliance and Business Operations Manager. This is a new role. You will make sure we know, document and protect the information and data the company runs on. That means running our certified ISO 27001 management system, keeping our compliance documentation accurate, understanding how data moves through the business and making sure we stay ahead of the regulations that affect us, from GDPR and DORA to the EU AI Act. You are not an engineer, and we do not need you to be. Other people build the integrations. You make sure every data flow is understood, documented and compliant, and you keep pushing to make the flows simpler. You will run our compliance programme on Vanta and use AI tools wherever they save time. Compliance is the core of the job, but we want someone who also cares about how the business works. On top of the compliance work, you will support the team with lighter financial administration such as preparing payroll inputs, invoicing, and collecting bookkeeping information. Payroll, bookkeeping and financial reporting is managed by others. About Accutics Accutics sells marketing data governance to large companies. Our customers define one campaign taxonomy across brands, markets and agencies, and the platform checks campaign tracking against those standards as campaigns are created and launched (accutics.com). This role does the same work inside our own company. We are about 30 people, ISO 27001 certified, headquartered in Copenhagen, with subsidiaries in the UK and the US. Many of our customers are large enterprises, including banks and insurers (financial services). They ask detailed questions about how we handle their data, and our answers have to hold up. What you will do Compliance comes first. Knowing our data flows well is what keeps the compliance work accurate, and it lets you improve how we work along the way. Compliance

• Run information security reviews of new and existing systems and vendors. Collect the information, assess the risks and document the result so it holds up in an audit.
• Keep our GDPR documentation true to how we actually work. That covers records of processing, data processing agreements, retention rules and requests from data subjects.
• Keep the systems register, subprocessor list and access matrix current.
• Run the day-to-day operation of our certified ISO 27001 management system alongside our CTO, who leads information security. That includes risk assessments, access reviews, policy reviews, internal audits and the annual certification cycle.
• Administer our compliance platform, Vanta. Keep integrations, automated tests, evidence collection and policy records running and look for ways to automate more.
• Answer security and privacy questionnaires from customers. Some of them are banks, so expect requirements that come from DORA.
• Stay ahead of the regulations that apply to us. Today that means GDPR and DORA; the EU AI Act is coming. Track what is changing, work out what it means for us and make sure we are ready.

Data flows

• Map how data moves between our systems and teams, from the first contact with a lead to a paid invoice. Keep the map current as tools and processes change.
• Know who uses which data, what they use it for and who is responsible for it.
• Find the flows that waste time, duplicate work or produce bad data, and fix them with the people who own them. Engineers and integration partners do the build. You define what good looks like and check that it happened.
• Use data to decide what to fix first, and measure whether the fix worked.
• Explain our data flows to colleagues in plain words, so a new hire can find out where something lives without asking around.

Business support

• Support the team with lighter financial administration: payroll inputs like vacation days and expense refunds, issue invoices, and collect bookkeeping information. Payroll, bookkeeping and financial reporting is managed by others.
• This is not the main job, but it matters and it will teach you how the commercial side of the business works.

What you bring

• Experience performing information security reviews of systems or vendors. You have collected the information, assessed the risks and documented the findings yourself.
• Experience from a start-up or scale-up. You know how to run compliance without a large team or a big budget behind you.
• Hands-on experience with data compliance, GDPR above all. You have kept records of processing, worked with data processing agreements or answered customer due diligence.
• A real interest in how a business works. You want to know why a step exists before you decide whether to keep it.
• An interest in the legal side of business: contracts, data processing agreements and regulatory frameworks. You do not need a law degree, but you should enjoy reading the fine print.
• A track record of documenting processes or data flows that people actually use.
• Project management skills. You can plan a review, a rollout or an improvement project, keep it on track and get it done across teams.
• Experience with a compliance automation platform such as Vanta, Drata or Secureframe, or a genuine interest in learning one.
• Enough technical understanding to talk with engineers about systems and integrations, without building them yourself.
• Clear written English. Danish is a plus.
• The confidence to ask whether we actually need a step, a tool or a field, and to push for an answer.

Bonus points

• Knowing ISO 27001 or SOC II type 2 before you start. If you don't, we will teach you our policies and how we work with them.
• A background in operations, business analysis, consulting or risk advisory.
• You have improved a process with data. You measured it before, changed it and measured it after.
• Familiarity with data governance ideas such as data ownership, shared definitions and data quality.
• Experience with Jira and Confluence, or similar tools.
• You use AI tools in your daily work and have opinions about where they help and where they don't.

What we offer You will not start from a blank page. Our systems register, data inventory, access matrix and review templates are already in place, and our compliance programme runs on Vanta. Your job is to own them and make them better.

• An office-based role at our Copenhagen office.
• Competitive salary, pension and health insurance.
• Reporting to our CEO.
• Start as soon as possible.

How to apply Send your CV to careers@accutics.com. Skip the cover letter. Instead, write a few lines about an information security review you performed, what you found and how you documented it. We review applications as they come in.