GRC Specialist – German-speaking (Remote)

About the role

Secfix is looking for a German‑speaking GRC Specialist to strengthen its compliance function as the company scales. The role combines compliance delivery, content creation, and internal audit support, working closely with the co‑founder, CISO and Customer Success Lead.

Key responsibilities

• Build and maintain compliance frameworks in the Secfix platform (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, etc.).
• Own end‑to‑end internal audits for customers, from kickoff to final reporting.
• Manage multiple audits simultaneously, ensuring schedules are met.
• Develop and curate compliance content, including policies, automated checks, evidence templates, playbooks and security‑awareness training.
• Translate audit findings into product requirements and work with engineering to implement improvements.
• Collaborate with Customer Success, Product, and Founders to align compliance priorities with the roadmap.
• Strengthen relationships with certification partners and train auditors on the Secfix platform.

Required profile

• Fluent German (C1/C2) and strong English communication skills.
• Proven experience implementing ISO 27001 and related frameworks for customers.
• Ability to run audits independently and deliver clear, actionable reports.
• Self‑starter attitude with ownership mindset and ability to work remotely across multiple time zones.

Required skills

• ISO 27001 implementation
• TISAX compliance
• SOC 2 framework
• GDPR knowledge
• NIS 2, DORA familiarity
• ISO 27017/27018, ISO 42001, C5 awareness

What we offer

• Fully remote work from the UK, Germany, Austria, Poland, Montenegro or Serbia.
• Opportunity to shape a fast‑growing compliance automation platform.
• Dynamic, 100% remote team with hubs in Munich, Berlin and London.
• Backed by a $12 M Series A round and top European VCs.