Senior Information Security Specialist (German-speaking)

The role

You will own the compliance roadmap and implement frameworks like ISO 27001 for customers. You will mentor the compliance team and act as a senior compliance voice for customers, auditors, and product.

What you will do

• Own and drive the compliance roadmap inside the Secfix platform
• Implement ISO 27001 and adjacent frameworks end-to-end for customers
• Mentor and upskill the compliance team
• Conduct internal audits for strategic and complex customers
• Review internal audits performed by junior team members
• Act as a compliance partner to CSMs and sales reps
• Own the quality of compliance content in the platform
• Close framework gaps and incorporate auditor feedback
• Partner with product and engineering to translate compliance gaps into product work
• Deepen relationships with existing certification partners

Required qualifications

• German (C1/C2) and English (fluent)
• 5+ years of hands‑on information security and GRC experience in B2B SaaS
• Led 3+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company
• Hands-on experience with a GRC platform like Secfix, or similar GRC platforms
• Cloud infrastructure readiness across AWS, Azure, and GCP
• Experience with posture analysis and remediation planning
• Strong project management skills
• Excellent written communication
• Strong ownership mindset

Nice to have

• Experience implementing one or two additional compliance frameworks (e.g. SOC 2, GDPR, NIS 2, etc.)
• Experience mentoring or coaching colleagues in a compliance, audit, or GRC context
• Experience in a startup environment

Benefits

• 100% remote work with a virtual office in Gather
• Industry-competitive local salaries
• Generous equity package
• Access to world-class mentors
• €1,000 annual personal development budget
• Home office budget and access to co-working spaces
• 26 days holiday + local public holidays
• Comprehensive health coverage
• Annual retreat
• Company-wide events
• Latest tech equipment (MacBook, monitors, headphones)

Before you apply

• Can support hiring only within EU time zones
• Cannot support 100% asynchronous work
• Intro call with Talent team
• Take-home Assessment
• Assessment review and interview with CS Lead and CEO

About the company

Secfix automates security compliance in Europe for frameworks like ISO 27001, GDPR, TISAX, and SOC 2. It is a 100% remote team with hubs in Munich, Berlin and London.