GRC Specialist

🔥 20 hours ago

🌐 United Kingdom, Germany, +3 more countries – Remote

🇬🇧 United Kingdom – Remote 🇩🇪 Germany – Remote 🇦🇹 Austria – Remote 🇵🇱 Poland – Remote 🇷🇸 Serbia – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Secfix

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Secfix is a company that specializes in automating compliance processes for businesses to help them achieve and maintain security standards such as ISO 27001, TISAX, and GDPR. By utilizing integrations with cloud providers, SSO, HR systems, and ticketing tools, Secfix streamlines the compliance workflow, reducing manual effort by up to 90%. The platform offers features like automated checklists, risk management, vendor management, and policy management, making it easier for startups and SMEs to stay secure and compliant. Secfix is particularly beneficial for small companies seeking ISO 27001 certification, offering support to ensure a smooth and fast compliance journey. The company is based in Europe and prioritizes data protection with GDPR compliance and strict data encryption policies.

📋 Description

• Build and maintain compliance frameworks in the Secfix platform, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, and C5 • Own customer internal audits end to end, from kickoff through final report • Manage multiple audits and keep them on schedule • Implement ISO 27001 and adjacent frameworks end to end for customers • Own the quality of compliance content in the platform, including policies, automated checks, evidence templates, compliance enablement playbooks, and security awareness training • Close framework gaps and incorporate auditor feedback into team practice and platform improvements • Partner with product and engineering to translate compliance gaps into structured product work • Collaborate with Customer Success, Product, and Founders to align compliance, customer, and roadmap priorities • Develop relationships with certification partners • Train auditors on the Secfix platform for customer audits • Participate in screening, take-home assessment, assessment review, and founder interview stages

🎯 Requirements

• Fluent English • Bachelor's degree in computer science, software engineering, or a related technical field, or equivalent hands-on technical experience • 3+ years of hands-on information security and GRC experience • Led at least 1 successful ISO 27001 certification project as an implementer and/or auditor at a startup or mid-market company • Run at least 2 internal audits • Hands-on experience with a GRC platform such as Secfix or similar • Real depth in at least one framework beyond ISO 27001, such as TISAX, SOC 2, GDPR, NIS2, or similar • Strong project management skills • Excellent written communication and ability to produce clear, precise compliance content • Ability to operate as an individual contributor with strong ownership • Experience mentoring or coaching colleagues in a compliance, audit, or GRC context is a bonus • Startup experience is a plus • PECB ISO 27001 Lead Auditor certification or direct equivalent is a bonus • Must be based in the UK, Germany, Austria, Poland, or Serbia • Must address visa sponsorship requirements for the country in which based

🏖️ Benefits

• 100% remote work with a virtual office in Gather • Competitive local salaries at or above market rates • Generous equity package • Direct access to world-class mentors • €1,000 annual personal development budget • Home office budget • Access to co-working spaces • 26 days holiday plus local public holidays • Comprehensive health coverage • Annual retreat • Company-wide events • Latest tech equipment, including MacBook, monitors, and headphones