Information Security Lead

The role

The Information Security Lead will own the compliance roadmap and quality of compliance content within the Secfix platform. This person will manage the compliance team, implement frameworks for customers, and run Secfix's own internal compliance program.

What you will do

• Own and drive the compliance roadmap inside the Secfix platform
• Implement ISO 27001 and adjacent frameworks end-to-end for customers
• Hire, manage and upskill the compliance team
• Conduct internal audits for strategic customers and review team audits
• Act as a compliance partner to CSMs and sales reps
• Own the quality of compliance content in the platform
• Close framework gaps and incorporate auditor feedback
• Partner with product and engineering to translate compliance gaps into product work
• Collaborate with CS, Product, and Founders to align priorities
• Run the day-to-day of Secfix’s own compliance program

Required qualifications

• C1 or C2 English language proficiency is essential
• 7+ years of hands‑on information security and GRC experience in B2B SaaS
• At least 2 years in an InfoSec leadership role
• Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company
• Hands-on experience with a GRC platform like Secfix, or similar GRC platforms
• Cloud infrastructure readiness across AWS, Azure, and GCP
• Experience with posture analysis and remediation planning
• Strong project management skills
• Excellent written communication
• Strong ownership mindset
• Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field

Nice to have

• Experience implementing one or two additional compliance frameworks (e.g. SOC 2, GDPR, NIS 2, etc.)
• Experience in a startup environment

Benefits

• 100% remote work with a virtual office in Gather
• Industry-competitive local salaries
• Generous equity package
• Access to world-class mentors
• €1,000 annual personal development budget
• Home office budget and access to co-working spaces
• 26 days holiday + local public holidays
• Comprehensive health coverage
• Annual retreat
• Company-wide events
• Latest tech equipment (MacBook, monitors, headphones)

Before you apply

• Can support hiring only within EU time zones
• Cannot support 100% asynchronous work
• Intro call with Talent team
• Take-home Assessment
• Assessment review and interview with CS Lead and CEO

About the company

Secfix automates security compliance in Europe for companies seeking ISO 27001, GDPR, TISAX, and SOC 2. The company is a 100% remote team with hubs in Munich, Berlin and London.