GRC Specialist – Governance, Risk & Compliance

About the role

Secfix is looking for a GRC Specialist to strengthen its compliance function as the company expands across multiple frameworks and mid‑market customers. You will own the compliance knowledge within the platform, run internal audits, support the customer success team, and act as the compliance voice for customers, auditors, and product teams.

Key responsibilities

• Build and maintain compliance frameworks in the Secfix platform (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, etc.).
• Own end‑to‑end internal audits for customers, from kickoff to final reporting.
• Implement ISO 27001 and related frameworks for customers.
• Ensure high‑quality compliance content, including policies, automated checks, evidence templates, playbooks, and security‑awareness training.
• Translate framework gaps into product requirements with engineering.
• Collaborate with Customer Success, Product, and Founders to align compliance, customer, and roadmap priorities.
• Work with certification partners and train auditors on the Secfix platform.

Required profile

• Fluent English (mandatory).
• 3+ years of hands‑on experience in governance, risk and compliance.
• Proven ability to manage multiple audits simultaneously and meet deadlines.
• Strong collaboration skills with product, engineering, and customer‑facing teams.

Required skills

• ISO 27001
• TISAX
• SOC 2
• GDPR
• NIS 2
• DORA
• ISO 27017/27018
• ISO 42001
• C5

What we offer

• Fully remote work across the UK, Germany, Austria, Poland, Montenegro or Serbia.
• Opportunity to shape a fast‑growing compliance automation platform.
• Collaborative, high‑performing team with strong VC backing.