Fonoa is the Tax Operating System for autonomous tax. AI that tracks every rule, acts on every obligation, and proves every

decision, built on modular infrastructure.

Fonoa’s modules cover the full indirect tax lifecycle: tax ID validation, real-time tax determination, e-invoicing, and returns.

All on one shared data model and integration, with one audit trail. Each added capability makes the others stronger.

Agents monitor obligations, populate returns, catch anomalies and assemble audit packs in seconds. The system does the work.

Humans make the calls. That’s autonomous tax.

We operate across 120+ countries, with clients going live in weeks, if not days.

Trusted by Canva, Netflix, Spotify, Uber, Zoom and Booking.com. Rated 4.5/5 stars and a High Performer on G2 and 4.6/5 stars on

Gartner Peer Insights.

Find out more: www.fonoa.com

POSITION OVERVIEW

As Fonoa continues to scale globally, we are looking for an IT & Security Program Manager to take ownership of how our IT and

security initiatives are planned, coordinated, and delivered across the company.

This is not a purely technical role. You will be the person who makes sure the right things happen at the right time across both

IT and security: IT projects land on schedule, security audits and certifications are planned well in advance, penetration tests

are tracked to closure, tooling rollouts are coordinated properly, and nothing slips through the cracks. You will pull in Security

Engineers, Infrastructure, IT, Legal, and external vendors as each initiative requires, keeping everyone aligned and moving.

Fonoa's IT and security function covers a lot of ground. You will be the connective tissue that holds all the different pieces

together and turns a busy team into a well-run program.

KEY RESPONSIBILITIES

Own the IT & Security program: keep the calendar, track initiatives, and make sure nothing falls through the cracks. You are

responsible for delivery, not for doing everything yourself.

Coordinate IT initiatives such as tooling rollouts, IdP migrations, and access management projects, working with Infrastructure

and IT to keep them scoped and on track.

Run the compliance and certification cycles (SOC 2, ISO 27001, ISO 9001): coordinate with auditors, internal teams, and Legal

to keep evidence collection and deadlines under control.

Manage the pentest program end to end: scope, vendors, finding tracking, and remediation follow-up in collaboration with

Security Engineers and Engineering.

Drive the security awareness program together with People Ops: training campaigns, phishing simulations, and completion

tracking.

Coordinate risk and vendor reviews, keeping the risk register up to date and supporting enterprise sales with security

questionnaires and due diligence requests.

Report on program health to leadership with clear, consistent visibility into what is on track, what is at risk, and what needs

decisions.

You will work alongside Security Engineers, IT, Infrastructure, Legal, and external vendors. Your job is to make the team more

effective by owning the coordination layer, not to be a one-person department.

QUALIFICATIONS

4+ years of experience in program management, IT operations, or a cybersecurity/GRC coordination role

End-to-end ownership of at least one full SOC 2 or ISO 27001 cycle

Strong understanding of multiple frameworks and how to map controls across them

Working knowledge of GDPR, enterprise risk, and third-party risk

Ability to operate independently and build structure from ambiguity

Good enough understanding of IT and security to have credible conversations with engineers and auditors, without needing to be

a hands-on technical practitioner

Strong written and verbal communication: able to translate technical work into clear updates for non-technical audiences

Highly organised, deadline-driven, and comfortable holding others accountable

WHY JOIN US

Opportunity to build and shape security at a fast-growing, global startup

High ownership and impact in a critical function

Work with a collaborative, motivated, and experienced team

Competitive compensation and benefits

Flexible working arrangements

If you’re passionate about building security the right way, enjoy taking ownership, and want to help scale a modern,

security-conscious organisation, we’d love to hear from you.

As part of the recruitment process at Fonoa, we process your personal data in accordance with our Privacy Notice for Job

Applicants. This notice explains how and why your data is collected and used, and how you can contact us if you have any concerns.

Role

IT & Security Program Manager

Locations

Zagreb

Published

May 12

Deadline

August 16

Tags for this job

AI Rust

Similar Jobs

IT Support Engineer - US Working Hours (12:00CET - 20:00CET)

Fonoa

Zagreb•Posted: Mar 17•Deadline: Aug 16

Fonoa is the Tax Operating System for autonomous tax. AI that tracks every rule, acts on every obligation, and proves every decision, built on modular infrastructure. Fonoa’s modules cover the full indirect tax lifecycle: tax ID validation, real-time tax determination, e-invoicing, and returns. All on one shared data model and integration, with one audit trail. Each added capability makes the others stronger. Agents monitor obligations, populate returns, catch anomalies and assemble audit packs in seconds. The system does the work. Humans make the calls. That’s autonomous tax. We operate across 120+ countries, with clients going live in weeks, if not days. Trusted by Canva, Netflix, Spotify, Uber, Zoom and Booking.com. Rated 4.5/5 stars and a High Performer on G2 and 4.6/5 stars on Gartner Peer Insights. Find out more: www.fonoa.com Position Overview: As Fonoa grows, we seek an IT Engineer to help us scale internal IT processes and deliver outstanding support to our globally distributed team. You’ll play a key role in shaping how we approach IT across the company—working closely with teams like People Ops, Finance, Legal, Sales, and Engineering to ensure everyone has what they need to do their best work. We rely on Google Workspace, Slack, Zoom, and other third-party tools to connect and get things done. Our fleet consists primarily of Macs, with a mix of Windows and Linux laptops in the wild. This role is ideal for someone who enjoys wearing multiple hats. On any given day, you might be onboarding a new joiner, responding to IT support requests, improving internal processes, exploring ways to enhance security, or automating something that used to take hours. You will also be part of the on-call rotation for urgent IT and Security requests. If you’re passionate about helping people, love automation, and care deeply about good IT practices—we’d love to hear from you. Key Responsibilities: * Build a smooth, reliable day-one setup experience by making sure new joiners have the right hardware, software, and access from the start. * Own and resolve help desk requests, supporting employees with day-to-day technical issues. * Be part of the rotation in the on-call calendar for the team. * Administer and maintain our Google Workspace environment, including user provisioning, group and calendar management, security settings, and support for day-to-day operations. * Manage the full lifecycle of IT equipment—from procurement and repairs to replacements and secure disposal. * Create and maintain clear, proper documentation for internal IT processes. * Manage user access and permissions across our internal tools and platforms. * Keep our hardware inventory accurate and up-to-date. * Work closely with vendors and service providers to evaluate and support the tools we rely on. * Build and maintain internal tools and automation to make our IT operations more efficient and scalable. Qualifications * Have hands-on experience with Mobile Device Management (MDM) tools and know how to deploy, configure, and monitor devices at scale securely. * Know your way around hardware management—handling procurement, renewals, and logistics while keeping asset records current. * Are comfortable rolling out and managing software across platforms, ensuring everything runs smoothly and meets company needs. * Hands-on experience administering Google Workspace in a company setting. * Enjoy supporting your teammates, especially when troubleshooting hardware or software issues (MacOS is a big plus here). * Understand the importance of security and have experience applying best practices like encryption, access controls, and regular audits to protect systems and data. Bonus points if: * You like to automate repetitive tasks and have experience (or interest) in any automation tools * You’ve worked with (or are keen to learn) scripting or coding in Python, Go, or Shell. Why Join Us: * Opportunity to work in a dynamic and fast-growing startup environment. * Collaborate with a passionate and talented team dedicated to innovation and excellence. * Competitive salary and benefits package. * Professional growth and development opportunities. * Flexible work arrangements, including remote work options. As part of the recruitment process at Fonoa, we process your personal data in accordance with our Privacy Notice for Job Applicants. This notice explains how and why your data is collected and used, and how you can contact us if you have any concerns.

PythonLinuxAI

Senior DevOps & Infrastructure Engineer

Cenosco

Zagreb•Posted: Jul 17•Deadline: Aug 16

YOUR PROFILE Are you a senior DevOps and infrastructure engineer who enjoys building reliable cloud platforms, enabling engineering teams, and using AI to remove operational complexity? At Cenosco, we build Asset Integrity Management software trusted by global leaders in Oil & Gas, Chemicals, and Energy. We are looking for someone who can strengthen our DevOps foundation, evolve our infrastructure, and help us use AI-powered tools to automate how we build, deploy, monitor, and operate our platform. This role is primarily focused on DevOps, infrastructure enablement, IaC, deployment automation, and platform reliability. You will also play an important part in shaping how we use AI and agentic tooling (i.e. Copilot, Cursor, Codex, and similar tools) to make DevOps work faster, smarter, and more scalable. WHAT YOU'LL DO DevOps, Infrastructure & Platform Enablement * Design, build, and maintain scalable cloud infrastructure on Azure, with a strong focus on reliability, security, performance, and operational simplicity. * Own and improve Infrastructure as Code practices using Terraform, Pulumi, or similar tools, creating reusable patterns that help teams provision and manage environments consistently. * Build, optimize, and automate CI/CD pipelines for application, infrastructure, and platform deployments across environments. * Enable engineering teams by creating self-service infrastructure, deployment templates, automation scripts, documentation, and platform standards. * Drive containerization and orchestration practices using Kubernetes and Talos, ensuring our platform can scale reliably and efficiently. * Embed security, compliance, monitoring, and disaster recovery considerations into infrastructure and deployment workflows from the start. AI-Assisted DevOps Automation * Use AI-assisted and agentic tools to automate repetitive DevOps work, including pipeline creation, IaC generation, environment provisioning, deployment workflows, and operational runbooks. * Experiment with tools such as GitHub Copilot, Cursor, Codex, and similar solutions to improve engineering productivity and reduce manual infrastructure effort. * Identify opportunities to apply AI to troubleshooting, incident response, monitoring, release management, and platform operations. * Help define practical, secure, and scalable ways of using AI in DevOps processes, while maintaining strong engineering standards and governance. Observability, Reliability & Continuous Improvement * Improve monitoring, alerting, logging, and observability practices to help teams detect issues earlier and resolve incidents faster. * Analyze platform performance, deployment quality, incidents, and recurring operational patterns to recommend practical improvements. * Collaborate closely with software engineering, security, product, and architecture teams to continuously improve our delivery and infrastructure standards. WHAT YOU'LL NEED * 8+ years of professional experience in DevOps & Infrastructure engineering, Platform engineering, or a similar role in a SaaS or product-based environment. * Hands-on experience with Azure (or similar) cloud services and cloud-native infrastructure design * Strong practical knowledge of CI/CD, deployment automation, release pipelines, and environment management. * Experience with Infrastructure as Code tools such as Terraform, Pulumi, or similar technologies. * Good understanding of containers, Kubernetes, AKS, Ansilbe, Packer, networking, security, monitoring, and reliability practices. * Practical experience using AI-assisted coding or automation tools, or a strong interest in applying them to DevOps and infrastructure workflows. * A strong enablement mindset: you enjoy creating standards, reusable solutions, documentation, and automation that help engineering teams move faster andmore safely. BONUS POINTS * Experience using machine learning, heuristic analysis, or AI-assisted techniques to analyze logs, detect anomalies, spot trends, and support proactive troubleshooting. * Experience building internal developer platforms, self-service deployment workflows, golden paths, or platform engineering tooling. * Experience with security automation, policy-as-code, cost optimization, or FinOps practices in cloud environments. * Exposure to AI infrastructure, MLOps, data pipelines, or supporting engineering teams that build AI-enabled products. WORKING LOCATIONS * Croatia, Zagreb - Hybrid * Croatia, Pula - Hybrid * UK - Remote WHY JOIN US? * Join a product-focused engineering environment where DevOps and infrastructure directly enable scale, reliability, and innovation. * Shape modern cloud, infrastructure, and deployment practices across a growing SaaS platform. * Introduce practical AI-driven automation that helps engineering teams work faster, smarter, and with greater confidence. * Work on meaningful platform improvements that reduce manual effort, improve reliability, and create a better developer experience.

Product Manager (Reliability)

Cenosco

Zagreb•Posted: Jul 17•Deadline: Aug 16

YOUR PROFILE Cenosco builds the software that keeps asset-heavy industries – oil & gas, chemicals, pulp & paper, renewables, and mining – running safely and reliably. We're looking for a Product Manager to own our reliability space, home to IMS RCM, the module that helps customers optimise preventive maintenance strategy and move up the maturity curve from reactive to predictive. You'll own a defined product area end to end: talking to customers, shaping the roadmap, writing PRDs, and partnering closely with engineering to ship features that genuinely reduce risk and downtime for the people running critical equipment. Cenosco is the leading software company in Asset Integrity Management, on a mission to bring the digital revolution to reliability and safety. If you want your product work to directly protect people and equipment in the real world, we'd like to hear from you. WHAT YOU'LL DO * Run discovery for your product area - customer calls, ticket clustering, usage analysis - and turn raw signals into evidenced opportunities * Write and defend PRDs and problem briefs that need no significant rework before engineering sign-off * Own and prioritise your backlog using RICE scoring, linking every roadmap item to a company objective * Define success metrics before build and run the post-release "did it work?" review * Be the primary point of contact for stakeholders-sales, CS, and support-on your product area * Partner daily with engineers, designers and domain experts, bringing good product taste to trade-off conversations rather than dictating solutions WHAT YOU BRING * Around 3 years of experience as a Product Owner, Business Analyst, or in a similar role * Strong product taste and comfort working closely with engineering teams day to day * A structured, evidence-based approach to prioritisation - you can say "no" with clear rationale * Clear communication skills and confidence owning stakeholder relationships * Hands-on experience with product and ticketing tools (e.g. Productboard, Azure, Github, Jira) and AI tools that support product work, plus a solid grasp of the end-to-end product lifecycle – from discovery through build to release and iteration EXTRA POINTS FOR * Understanding of maintenance practices in asset-heavy industries * Familiarity with ERP or CMMS systems * Experience in Oil & Gas industry WHAT YOU'LL GET * A clearly defined role with a leveling guide, so you know exactly what progression looks like * A PM community for cross-team learning and shared craft * Budget and time for training and development * Regular 1-on-1 support to remove blockers and grow your career * Flexible, hybrid work across our Pula, Zagreb, or The Hague offices