GRC Specialist, German-speaking

🔥 14 hours ago

🌐 Germany, United Kingdom, +3 more countries – Remote

🇩🇪 Germany – Remote 🇬🇧 United Kingdom – Remote 🇦🇹 Austria – Remote 🇵🇱 Poland – Remote 🇷🇸 Serbia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Secfix

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Secfix is a company that specializes in automating compliance processes for businesses to help them achieve and maintain security standards such as ISO 27001, TISAX, and GDPR. By utilizing integrations with cloud providers, SSO, HR systems, and ticketing tools, Secfix streamlines the compliance workflow, reducing manual effort by up to 90%. The platform offers features like automated checklists, risk management, vendor management, and policy management, making it easier for startups and SMEs to stay secure and compliant. Secfix is particularly beneficial for small companies seeking ISO 27001 certification, offering support to ensure a smooth and fast compliance journey. The company is based in Europe and prioritizes data protection with GDPR compliance and strict data encryption policies.

📋 Description

• Build and maintain compliance frameworks in the Secfix platform • Own internal audits for customers from kickoff through final report • Keep multiple audits moving and on schedule • Implement ISO 27001 and adjacent frameworks end-to-end for customers • Own the quality of compliance content in the platform • Create policies, automated checks, evidence templates, Compliance Enable playbooks, and security awareness trainings • Close framework gaps and incorporate auditor feedback into team practices and platform improvements • Partner with product and engineering to translate compliance gaps into structured product work • Collaborate with CS, Product, and Founders to align compliance, customer, and roadmap priorities • Deepen relationships with certification partners • Train auditors on the Secfix platform for customer audits • Strengthen Secfix's compliance function as the company scales into more frameworks and mid-market customers

🎯 Requirements

• German (C1/C2) and English (fluent) • Bachelor's degree in computer science, software engineering, or a related technical field, or equivalent hands-on technical experience • 3+ years of hands-on information security and GRC experience • Led at least 1 successful ISO 27001 certification project as an implementer and/or auditor at a startup or mid-market company • Ran at least 2 internal audits • Hands-on experience with a GRC platform like Secfix or similar GRC platforms • Real depth in at least one framework beyond ISO 27001, such as TISAX, SOC 2, GDPR, NIS2, or similar • Strong project management skills • Excellent written communication, especially producing clear, precise compliance content • Strong ownership mindset and ability to operate as an individual contributor • Experience mentoring or coaching colleagues in a compliance, audit, or GRC context is a bonus • Experience in a startup environment is a plus • PECB ISO 27001 Lead Auditor certification or direct equivalent is a bonus

🏖️ Benefits

• 100% remote work with a virtual office in Gather • Competitive local salaries at or above market rates • Generous equity package • Direct access to world-class mentors • €1,000 annual personal development budget • Home office budget • Access to co-working spaces • 26 days holiday plus local public holidays • Comprehensive health coverage • Annual retreat • Company-wide events • Latest tech equipment including MacBook, monitors, and headphones