GRC Specialist – German Speaking (Remote)

About the role

Secfix is looking for a German‑speaking GRC Specialist to help scale its compliance platform across multiple frameworks. The role is fully remote and works closely with the co‑founder, CISO and Customer Success Lead to deliver high‑quality compliance content and audits.

Key responsibilities

• Build and maintain compliance frameworks in the Secfix platform, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA and others.
• Own end‑to‑end internal audits for customers, from kickoff to final reporting, while managing multiple audits simultaneously.
• Create and curate compliance content such as policies, automated checks, evidence templates and security awareness training.
• Partner with product and engineering to translate compliance gaps into structured product work.
• Collaborate with CS, product and founders to align compliance, customer and roadmap priorities.

Required profile

• 3+ years of hands‑on information security and GRC experience.
• Led at least one successful ISO 27001 certification project as implementer or auditor.
• Conducted at least two internal audits.
• Fluent German (C1/C2) and English.
• Bachelor’s degree in computer science, software engineering or related field, or equivalent experience.

Required skills

• Deep knowledge of ISO 27001 and at least one other framework (e.g., TISAX, SOC 2, GDPR, NIS 2).
• Experience with GRC platforms such as Secfix or similar.
• Strong project‑management abilities to break down ambiguous initiatives into concrete deliverables.

What we offer

• 100% remote work with a virtual office in Gather.
• Competitive local salary paid at or above market rates.
• Generous equity package.
• Annual €1,000 personal development budget and home‑office budget.
• 26 days of holiday plus public holidays.
• Comprehensive health insurance and annual retreat.