Senior Information Security Specialist (German-speaking)

About the role

We are looking for a Senior Information Security Specialist who is fluent in German to join Secfix’s compliance team. The role sits at the intersection of compliance delivery, content creation and team support, working closely with the co‑founder & CISO and the Customer Success Lead. You will own the compliance knowledge inside our platform and mentor junior specialists while influencing product and audit outcomes.

Key responsibilities

• Own and drive the compliance roadmap across frameworks such as ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA and others.
• Implement ISO 27001 and related frameworks end‑to‑end for customers and conduct internal audits for strategic accounts.
• Mentor and upskill the compliance team, reviewing work and ensuring consistency in audits and deliverables.
• Partner with Customer Success and Sales to provide expert support on customer queries and join calls when deep expertise is required.
• Maintain and improve the quality of compliance content, including policies, evidence templates and security awareness training.
• Collaborate with Product and Engineering to translate compliance gaps into product requirements.

Required profile

• German (C1/C2) and English fluency.
• 5+ years of hands‑on information security and GRC experience in B2B SaaS.
• At least three successful ISO 27001 certification projects as implementer or auditor.
• Strong project‑management abilities and excellent written communication.

Required skills

• ISO 27001, SOC 2, GDPR, NIS 2, DORA compliance frameworks.
• Experience with GRC platforms (e.g., Secfix or similar).
• Cloud infrastructure readiness on AWS, Azure and GCP, including posture analysis and remediation planning.

What we offer

• 100% remote work with a virtual office in Gather.
• Competitive local salary and generous equity package.
• Annual personal development budget of €1,000 and home‑office budget.
• 26 days of holiday plus public holidays, comprehensive health insurance and annual retreat.
• Latest tech equipment (MacBook, monitors, headphones) and regular company‑wide events.