ISO 27001 Internal Auditor, German-speaking

This is a fully remote position, open to applicants in Europe.

📋 Description

• You will be responsible for managing internal audits for our customers from initiation to the final report, which they will present during their external audit.

• Evaluate and sample evidence on the Secfix platform, ensuring compliance with the pertinent ISO 27001 controls.

• Conduct calls with customers to discuss your findings and any identified non-conformities.

• Identify significant non-conformities, including straightforward ones, to prevent avoidable issues from arising during external audits.

• Document findings in a manner that is actionable for non-technical founders, highlighting what is lacking, its importance, and suggested next steps.

• Manage multiple audits simultaneously, ensuring that each remains on track.

• Maintain impartiality regarding implementation and clearly separate auditing from assistance.

• Familiarize yourself with additional frameworks (TISAX, ISO 42001) and contribute to developing a repeatable audit structure for them.

• Assist in enhancing framework content on the platform, including examples of evidence and guidance.

• Provide structured product feedback when you observe recurring issues within the platform.

⛳️ Requirements

• Proficiency in German (C1/C2) and fluent English is essential for this position.

• Up to 2 years of experience in information security.

• Practical experience with ISO 27001 internal audits, having personally conducted at least 10+ audits.

• A PECB ISO 27001 Lead Auditor certification or an equivalent qualification.

• Hands-on experience auditing within a modern GRC platform.

• Ability to communicate complex requirements in clear, straightforward written and spoken English.

• Nice-to-have: Experience in auditing or implementing TISAX, ISO 42001, NIS2, or SOC 2.

• Nice-to-have: Background in an early-stage startup (Seed to Series B).

• Nice-to-have: Familiarity with a modern SaaS product and collaboration with product teams across various functions.

🏝️ Benefits

• Remote Work: 100% remote work with a virtual office in Gather.

• Competitive Salary: Industry-competitive local salaries. We offer local rates that meet or exceed market standards, aligned with GitLab's philosophy.

• Equity: Generous equity package – we are all stakeholders in Secfix and share in our collective success.

• Mentorship: Backed by leading VCs and accelerators, we provide direct access to world-class mentors.

• Development Budget: €1,000 annual personal development budget.

• Home office Budget: Budget for home office setup and access to co-working spaces.

• Holidays: 26 days of vacation plus local public holidays.

• Health Insurance: Comprehensive health coverage.

• Annual Retreat: An annual retreat to foster connections and inspire ideas (this year, we're headed to Alicante!).

• Company Events: Company-wide events to strengthen relationships and enjoy some fun!

• Tech Equipment: Latest technology equipment (MacBook, monitors, headphones).