GRC Specialist (Governance Risk and Compliance) (Fully Remote)

• Strengthen the compliance function as Secfix scales into more frameworks and mid-market customers.
• Act as the compliance voice for customers, auditors, and product, working closely with the CISO and CS Lead.

Responsibilities:

• Build and maintain compliance frameworks, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, and more.
• Run internal audits and implement ISO 27001 end-to-end for customers.
• Create policies, automated checks, and training content to support customers and internal teams.

Qualifications:

• German (C1/C2) and English (fluent) required.
• 3+ years of hands-on GRC experience and at least one successful ISO 27001 certification project.
• Strong project management and written communication skills, with the ability to break down complex tasks.
• 100% remote work, competitive salary, and generous equity.
• Annual development budget, home office budget, and access to co-working spaces.
• 26 days holiday plus local public holidays, comprehensive health insurance, and annual company retreat.

Secfix

Secfix automates security compliance for European companies, helping them achieve ISO 27001, GDPR, TISAX, and SOC 2 efficiently. They are a 100% remote team with hubs in Munich, Berlin, and London, recently raised a $12M Series A, and are backed by top VCs.