Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 days ago

IT & Compliance Manager

duve/58.00d7 open roles

Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT & Compliance Managerduve/58.00d

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on duve/58.00d's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: first seen 3 days ago

The posting

Duve is a fast-growing hospitality tech company transforming how hotels and vacation rentals connect with their guests. Our platform helps them deliver personalized, digital guest experiences at scale from the moment a booking is made and throughout the entire stay.

Founded in 2016 and headquartered in Tel Aviv, Duve is trusted by 1,000+ customers across 70+ countries, serving millions of travelers worldwide.

Following a $60M funding round, Duve is entering its next phase of growth, with AI playing a central role in the evolution of our platform. As we continue to expand globally, we’re investing in advanced technology to shape the future of guest experience and how hotels and vacation rentals operate and connect with their guests.

About this Role

We’re looking for a hands-on IT & Compliance Manager to own Duve’s internal IT environment and lead our security, privacy, and compliance operations.

You’ll be responsible for the systems our employees rely on every day, while driving our compliance program across frameworks such as SOC 2, ISO 27001, ISO 27701, PCI DSS, and GDPR.

Working closely with R&D, DevOps, HR, Legal, Sales, Customer Success, and external vendors, you’ll ensure our internal environment is secure, scalable, audit-ready, and able to support the requirements of our growing enterprise customer base.

This is an individual contributor role reporting directly to the CTO, with end-to-end ownership and responsibility for managing relevant external vendors and partners.

Requirements

  • 4+ years of experience in IT, Information Security, Compliance/GRC, or a similar role
  • Hands-on ownership of at least one SOC 2 or ISO 27001 audit or certification cycle
  • Experience with identity and endpoint management tools such as JumpCloud, Okta, Google Workspace, Entra ID, or similar
  • Working knowledge of AWS security fundamentals, including IAM, logging, network boundaries, and encryption
  • Practical experience with GDPR and privacy operations, including DSRs, ROPA, and DPAs
  • Experience creating and maintaining security policies, procedures, controls, and audit documentation
  • Ability to independently own recurring IT, security, and compliance processes end-to-end
  • Strong communication skills and the ability to work effectively with both technical teams and enterprise customers
  • Fluency in English and Hebrew

Nice-to-have

  • Experience with Vanta, Drata, or a similar compliance automation platform
  • Experience with ISO 27701, PCI DSS, or NIST CSF
  • Certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CIPP/E, or equivalent
  • Familiarity with Kubernetes, CI/CD security, vulnerability management, or dependency scanning tools
  • Scripting or automation experience
  • Experience in a B2B SaaS environment, particularly with enterprise customers
  • Familiarity with AI governance and emerging enterprise security requirements around AI

What you'll do

  • Own and continuously improve Duve’s information security and privacy management programs, including controls, policies, evidence, risk management, and corrective actions
  • Lead compliance and certification activities across SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS, and GDPR
  • Manage external audits end-to-end, including preparation, evidence collection, auditor coordination, findings, and remediation
  • Own enterprise security questionnaires, customer security requirements, and security documentation supporting Sales and Customer Success
  • Manage identity, access, and endpoint operations, including employee onboarding and offboarding, MFA, permissions, and periodic access reviews
  • Own core IT operations, including asset management, device security, office IT, and employee support escalations
  • Manage privacy processes alongside the DPO, including data inventory, ROPA, DSRs, retention, DPAs, and privacy impact assessments
  • Manage third-party and vendor security risk, including due diligence, ongoing reviews, and subprocessor management
  • Coordinate security incident response, vulnerability management, security awareness, and business continuity processes
  • Partner closely with R&D and DevOps on security controls, infrastructure risks, remediation, logging, monitoring, and technical security initiatives
  • Identify opportunities to automate repetitive IT and compliance processes and improve operational efficiency
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against duve/58.00d's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on duve/58.00d's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    duve/58.00d's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.