Head of IT Security and Compliance

About the Role

Vergence is hiring a hands-on Head of IT Security and Compliance to own IT security, IAM, MDM, GDPR compliance, and core SaaS operations across a group of around 280 employees. We have a main HQ in Oslo, and many remote teammates working on personal devices, so you will help define a practical BYOD approach that still meets our security and compliance needs. This is a mid-senior individual contributor role with broad scope, reporting to group leadership, with DPO responsibilities across entities.

What Your Main Responsibilities Will Be

• Own and run IAM and MDM across Mac, iPhone, and Android fleets, including a workable BYOD model for remote users
• Administer Google Workspace security, user lifecycle, groups, and device policies, with a preference for native Google Workspace MDM where appropriate
• Define and maintain role-based and subsidiary-based access tiers, including clear exceptions for leadership roles where needed
• Own GDPR compliance across Norwegian and US entities, including DPO duties, DPIAs, DPAs, records of processing, and incident reporting routines
• Run access provisioning, deprovisioning, and periodic access reviews for major cross-group SaaS tools such as Slack, Google Workspace, Figma, Notion, Asana, and Linear
• Maintain a master inventory for core SaaS, optimize licenses and usage, and drive app consolidation where it reduces cost and complexity, using Cledara as the payment system of record
• Partner with finance on SaaS payments, renewals, and vendor management, and report on security posture and IT spend to leadership

What Success Looks Like

• A tiered IAM and MDM model is in place across subsidiaries and roles, and BYOD is clearly defined and enforced
• Core SaaS access and permissions are clean, reviewed on a regular cadence, and offboarding is reliable
• Cledara reflects an accurate cost for major SaaS, with measurable cost and tool consolidation wins
• GDPR documentation and processes are current and audit-ready across entities
• Security policies and incident response routines are documented, tested, and understood by the teams
• Happy colleagues with a safe, easy to use technical day-to-day life

What We're Looking For

Must-Haves:

• 5 to 7 years of experience in IT security or IT operations with clear ownership of policies, risk work, and incident response
• Hands-on Google Workspace administration experience, including security controls and user lifecycle management
• Direct hands-on experience managing Mac, iPhone, and Android fleets with MDM, preferably Google Workspace MDM or tools such as Jamf or Kandji
• Practical experience with SSO, MFA, permissions management, and running access reviews in a multi-app environment
• Working knowledge of GDPR obligations including records of processing, DPAs, DPIAs, and breach notification workflows
• Good judgment and clear communication, especially when balancing usability, risk, and speed

Nice-to-haves:

• Experience operating IT security and compliance across multiple legal entities and jurisdictions
• Familiarity with SOC 2 or ISO 27001 controls and audit preparation
• Experience driving SaaS consolidation and standardisation across teams
• Experience working closely with finance on license payments, renewals, and vendor negotiations
• Experience designing security controls specifically for BYOD and remote-first setups

What You'll Get

• Salary range of NOK 850,000 to 1,200,000 base, based on experience and fit.
• Work across multiple entities, jurisdictions, and technology stacks with meaningful autonomy.
• A high-context environment where decisions move fast and ownership is clear.
• On-site in central Oslo with a focused, execution-driven team.
• Equity participation may be discussed for the right fit and contribution.

About Vergence

Vergence is a co-company builder that partners with founders to build real companies from day one, combining capital, operating experience, and a clear view of where technology creates business value. We focus on commercial execution across a portfolio of high-growth ventures in e-commerce, real estate, healthtech, recruitment, and advanced visualization. We work in small teams with high context and full responsibility. No noise. Just companies that work.