GRC Specialist (German-speaking)

Secfix, a Munich-based startup automating security and compliance (ISO 27001, GDPR, TISAX, SOC 2) across Europe, is hiring a GRC Specialist to strengthen its compliance function as the company scales into more frameworks and mid-market customers. The role owns the compliance knowledge inside the Secfix platform, runs internal audits end-to-end for customers, and acts as the compliance voice for customers, auditors, and product. The GRC Specialist builds and maintains compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, and more), closes framework gaps, and partners with product and engineering to translate compliance gaps into structured product work. Candidates need 3+ years of hands-on information security and GRC experience, having led at least one ISO 27001 certification project and run at least two internal audits, plus fluent German and English. The role is fully remote, based in the UK, Germany, Austria, Poland, or Serbia.