Information Security Lead

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Secfix

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Secfix is a company that specializes in automating compliance processes for businesses to help them achieve and maintain security standards such as ISO 27001, TISAX, and GDPR. By utilizing integrations with cloud providers, SSO, HR systems, and ticketing tools, Secfix streamlines the compliance workflow, reducing manual effort by up to 90%. The platform offers features like automated checklists, risk management, vendor management, and policy management, making it easier for startups and SMEs to stay secure and compliant. Secfix is particularly beneficial for small companies seeking ISO 27001 certification, offering support to ensure a smooth and fast compliance journey. The company is based in Europe and prioritizes data protection with GDPR compliance and strict data encryption policies.

📋 Description

• Own and drive the compliance roadmap inside the Secfix platform across multiple compliance frameworks • Implement ISO 27001 and adjacent frameworks end-to-end for customers • Mentor and upskill the compliance team by sharing expertise and reviewing work • Conduct internal audits for strategic and complex customers • Review internal audits performed by junior team members • Support CSMs and sales representatives with customer questions and join calls when deep expertise is needed • Own the quality of compliance content, including policies, evidence templates, playbooks, and security awareness training • Close framework gaps and incorporate auditor feedback into team practice and platform improvements • Partner with product and engineering to translate compliance gaps into structured product work • Collaborate with Customer Success, Product, and Founders on priorities • Deepen relationships with certification partners and train auditors on the Secfix platform

🎯 Requirements

• Fluent English (C1 or C2 English essential) • 7+ years of hands-on information security and GRC experience in B2B SaaS • Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company • 2+ years of people/team management experience • Hands-on experience with a GRC platform like Secfix or similar platforms • Cloud infrastructure readiness across AWS, Azure, and GCP • Experience with posture analysis and remediation planning • Strong project management skills • Ability to break down ambiguous initiatives into concrete deliverables, prioritize ruthlessly, and ship • Excellent written communication and ability to produce clear, precise compliance content for diverse audiences • Strong ownership mindset and ability to operate as a senior individual contributor without waiting for direction

🏖️ Benefits

• 100% remote work with a virtual office in Gather • Generous equity package • Direct access to world-class mentors • €1,000 annual personal development budget • Home office budget • Access to co-working spaces • 26 days holiday + local public holidays • Comprehensive health coverage • Annual retreat • Company-wide events • Latest tech equipment (MacBook, monitors, headphones)