Information Security Lead

About the role

We are looking for an Information Security Lead to own and expand Secfix’s compliance offering across multiple frameworks. The role combines compliance delivery, content creation, and team leadership, reporting to the co‑founders and working closely with product and customer success.

Key responsibilities

• Own and drive the compliance roadmap for frameworks such as ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA and others within the Secfix platform.
• Implement ISO 27001 and related standards end‑to‑end for customers and lead successful certification projects.
• Hire, manage and up‑skill the compliance team, reviewing work and ensuring audit quality.
• Conduct internal audits for strategic customers and mentor team members on audit best practices.
• Partner with CSMs and sales to provide expert support on customer queries and join calls when deep expertise is required.
• Maintain and improve compliance content, including policies, evidence templates, playbooks and security awareness training.
• Collaborate with product and engineering to translate compliance gaps into product work and prioritize roadmap items.

Required profile

• 7+ years of hands‑on information security and GRC experience in B2B SaaS, including at least 2 years in a leadership role.
• Led 5+ successful ISO 27001 certification projects as implementer or auditor.
• Strong experience with GRC platforms (Secfix or similar) and cloud environments (AWS, Azure, GCP) including posture analysis and remediation planning.
• Excellent written communication for producing clear compliance content for auditors, founders and engineers.
• Bachelor’s degree in Computer Science, IT, Software Engineering or related field.

What we offer

• 100 % remote work within EU time zones, with a virtual office in Gather.
• Competitive local salary paid in EUR, generous equity package and annual €1,000 personal development budget.
• Home‑office allowance, co‑working space access, 26 days of holiday plus public holidays, comprehensive health insurance.
• Annual retreat and regular company‑wide events, latest tech equipment (MacBook, monitors, headphones).