GRC Specialist

Secfix GmbH

•

United Kingdom·Austria·Germany

•

2 weeks ago

🏠 Remote Full-time 📁 Remote Senior Engineering Jobs in Germany — Lead & CTO Roles

Be the first to apply today

Description

Secfix, a Munich-based startup automating security and compliance (ISO 27001, GDPR, TISAX, SOC 2) across Europe, is hiring a GRC Specialist to strengthen its compliance function as the company scales into more frameworks and mid-market customers. The role owns the compliance knowledge inside the Secfix platform, runs internal audits end-to-end for customers, and acts as the compliance voice for customers, auditors, and product. The GRC Specialist builds and maintains compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, and more), closes framework gaps, and partners with product and engineering to translate compliance gaps into structured product work. Candidates need 3+ years of hands-on information security and GRC experience, having led at least one ISO 27001 certification project and run at least two internal audits, plus fluent English. The role is fully remote, based in the UK, Germany, Austria, Poland, or Serbia.

Requirements

Fluent English is required for this role
3+ years of hands-on information security and GRC experience
Led at least one successful ISO 27001 certification project as an implementer and/or auditor at a startup or mid-market company
Has run at least two internal audits before
Hands-on experience with a GRC platform like Secfix, or similar GRC platforms
Real depth in at least one framework beyond ISO 27001 (TISAX, SOC 2, GDPR, NIS2, or similar)
Strong project management skills, able to break down ambiguous initiatives into concrete deliverables, prioritize ruthlessly, and ship
Excellent written communication, especially producing clear, precise compliance content for diverse audiences (auditors, founders, engineers)
Strong ownership mindset, operating as an individual contributor without waiting for direction
Bachelor's degree in computer science, software engineering, or a related technical field, or equivalent hands-on technical experience

Languages

English

C2 · Fluent

A1A2B1B2C1C2

Experience Level

InternEntry LevelMid-levelSeniorLeadExecutive

Benefits

100% remote work with a virtual office in Gather

Competitive, industry-benchmarked local salary

Generous equity package

Mentorship from top VCs and accelerators

€1,000 annual personal development budget

Home office budget and access to co-working spaces

26 days holiday plus local public holidays

Comprehensive health insurance

Annual company retreat

Company-wide events

Latest tech equipment (MacBook, monitors, headphones)

About the company

Secfix GmbH

Europe's leading all-in-one security compliance automation platform for SMBs and mid-market companies. Secfix automates up to 90% of compliance work for ISO 27001, SOC 2, TISAX, GDPR, NIS2, DORA, and other frameworks — pairing AI-powered automation with dedicated compliance experts. The platform runs 250+ automated security checks, manages vendor risk, handles employee on/offboarding for compliance, and provides an AI-powered virtual CISO. Serves hundreds of customers across 15+ European countries with a 100% audit success rate.