GRC Specialist

About the role

Secfix is looking for a Governance, Risk and Compliance (GRC) Specialist to strengthen its compliance function as the company scales. The role combines compliance delivery, content creation, and internal audit support, working closely with the co‑founder & CISO and the Customer Success Lead.

Key responsibilities

• Build and maintain compliance frameworks in the Secfix platform (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, etc.).
• Own end‑to‑end internal audits for customers, from kickoff to final reporting.
• Implement ISO 27001 and related frameworks for customers.
• Develop and maintain compliance content such as policies, automated checks, evidence templates, playbooks, and security awareness training.
• Translate compliance gaps into product work with engineering and product teams.
• Collaborate with Customer Success, Product, and Founders to align compliance, customer, and roadmap priorities.

Required profile

• Fluent English and 3+ years hands‑on information security and GRC experience.
• Led at least one successful ISO 27001 certification project as implementer or auditor.
• Conducted at least two internal audits.
• Experience with a GRC platform such as Secfix or similar.
• Deep knowledge of at least one additional framework (e.g., TISAX, SOC 2, GDPR, NIS 2).
• Strong project‑management skills and ability to produce clear compliance documentation.

Required skills

• ISO 27001
• TISAX
• SOC 2
• GDPR
• NIS 2
• Secfix GRC platform (or similar)

What we offer

• 100% remote work with a virtual office.
• Competitive local salary and generous equity package.
• Annual personal development budget of €1,000.
• Home‑office budget and access to co‑working spaces.
• Comprehensive health insurance and 26 days of holiday plus public holidays.
• Annual retreat and company‑wide events.