GRC Specialist, German-speaking

This is a fully remote position, open to applicants in Germany, +4 more countries.

📋 Description

• Develop and sustain compliance frameworks within the Secfix platform.

• Manage internal audits for clients from initiation to the delivery of the final report.

• Ensure multiple audits are progressing as scheduled.

• Implement ISO 27001 and related frameworks comprehensively for clients.

• Maintain the quality of compliance content within the platform.

• Develop policies, automated checks, evidence templates, Compliance Enable playbooks, and security awareness training materials.

• Address framework deficiencies and integrate auditor feedback into team practices and platform enhancements.

• Collaborate with product and engineering teams to translate compliance deficiencies into organized product initiatives.

• Work alongside Customer Success, Product, and Founders to synchronize compliance, customer needs, and roadmap priorities.

• Foster relationships with certification partners.

• Provide training to auditors on the Secfix platform for client audits.

• Enhance Secfix's compliance capabilities as the company expands into additional frameworks and mid-market clients.

⛳️ Requirements

• Proficient in German (C1/C2) and fluent in English.

• Bachelor's degree in computer science, software engineering, or a related technical discipline, or equivalent practical technical experience.

• Over 3 years of relevant experience in information security and Governance, Risk, and Compliance (GRC).

• Successfully led at least one ISO 27001 certification project as either an implementer or auditor in a startup or mid-market environment.

• Conducted a minimum of two internal audits.

• Practical experience with a GRC platform such as Secfix or similar.

• In-depth knowledge of at least one framework beyond ISO 27001, such as TISAX, SOC 2, GDPR, NIS2, or similar.

• Strong project management capabilities.

• Exceptional written communication skills, particularly in creating clear and precise compliance documentation.

• A strong sense of ownership and the ability to function as an individual contributor.

• Experience in mentoring or coaching peers in a compliance, audit, or GRC setting is a plus.

• Familiarity with a startup environment is advantageous.

• PECB ISO 27001 Lead Auditor certification or an equivalent qualification is a plus.

🏝️ Benefits

• Fully remote work with a virtual office in Gather.

• Competitive local salaries that meet or exceed market standards.

• Generous equity package.

• Direct access to top-tier mentors.

• €1,000 annual budget for personal development.

• Home office budget.

• Access to co-working spaces.

• 26 days of vacation in addition to local public holidays.

• Comprehensive health insurance coverage.

• Annual company retreat.

• Company-wide events.

• Provision of the latest technology, including MacBook, monitors, and headphones.