Work Across
Get started
All jobs
Save

Senior Information Security Specialist (German-speaking)

Secfix
Contract type
Freelance
Work mode
Remote · EU time zones
Experience
Senior · 5+ years

Job description

Senior Information Security Specialist at Secfix, owning the compliance offering inside the platform and delivering ISO 27001 and adjacent frameworks end-to-end for customers. The role combines compliance delivery, content ownership, and mentoring of junior compliance specialists.

At a glance

Employment
Full-time · Employee (employment agreement)
Work mode
Remote · EU time zones
Languages
German – C1/C2, English – fluent

What you'll do

  • Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and more as we expand)
  • Implement ISO 27001 and adjacent frameworks end-to-end for customers
  • Mentor and upskill the compliance team: sharing expertise, reviewing work, and helping drive consistency in audits and customer deliverables
  • Conduct internal audits directly for strategic and complex customers, and review the internal audits performed by junior team members to drive quality and consistency
  • Act as a compliance partner to CSMs and sales reps: fast, reliable support for customer questions, and joining customer calls when deep expertise is needed
  • Own the quality of compliance content in the platform (including creating policies, evidence templates, compliance enablement playbooks for our CSMs, security awareness trainings and more)
  • Close framework gaps and incorporate auditor feedback into both team practice and platform improvements
  • Partner with product and engineering to translate compliance gaps into structured product work
  • Collaborate closely with CS, Product, and Founders to align compliance, customer, and roadmap priorities
  • Deepen relationships with our existing certification partners and train auditors on the Secfix platform so they can confidently use it during customer audits

What we're looking for

  • German (C1/C2) and English (fluent) is a must for this role
  • 5+ years of hands-on information security and GRC experience in B2B SaaS
  • Led 3+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company
  • Hands-on experience with a GRC platform like Secfix, or similar GRC platforms
  • Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning
  • Strong project management skills with the ability to break down ambiguous initiatives into concrete deliverables, prioritise ruthlessly, and ship
  • Excellent written communication, especially in producing clear, precise compliance content for diverse audiences (auditors, founders, engineers)
  • Strong ownership mindset: operates as a senior individual contributor without waiting for direction

Nice to have

  • Experience implementing one or two additional compliance frameworks (e.g. SOC 2, GDPR, NIS 2, etc.)
  • Experience mentoring or coaching colleagues in a compliance, audit, or GRC context
  • Experience in a startup environment is a plus

Your team

Compliance

Compliance function at Secfix, working closely with the co-founder & CISO and the CS Lead

Benefits

Competitive Salary: Industry-competitive local salaries. We pay local rates that are at or above the market. We share this philosophy with GitLab

Annual Retreat: Annual retreat to build connections and inspire ideas (this year we spent an amazing time in Alicante, Spain!)

  • Remote Work: 100% remote work with a virtual office in Gather
  • Equity: Generous equity package – we're all owners of Secfix and beneficiaries of our collective success
  • Mentorship: We are backed by top VCs and accelerators and have direct access to world-class mentors
  • Development Budget: €1,000 annual personal development budget
  • Home office Budget: Home office budget and access to co-working spaces
  • Holidays: 26 days holiday + local public holidays
  • Health Insurance: Comprehensive health coverage
  • Company Events: Company-wide events to build relationships and have some fun!
  • Tech Equipment: Latest tech equipment (MacBook, monitors, headphones)

How to get hired

  1. 145 min - Intro call with Talent team
  2. 2Take-home Assessment
  3. 31.5hr Assessment review and interview with our CS Lead and CEO
  4. 445 min - Final Founder Interview with Co-Founders (CTO & CISO)

Apply

Save

About Secfix

Automating security compliance in Europe

Secfix is at the forefront of automating security compliance in Europe. It is run by a 100% remote team with hubs in Munich, Berlin and London.

Mission

Help companies get and stay ISO 27001, GDPR, TISAX, and SOC 2 fast and easy and reduce hundreds of hours of manual work.

Key facts

  • Munich, Berlin and London (hubs)
  • Security compliance automation
  • Raised a $12M Series A
  • Backed by top VCs, including Alstin Capital, Neosfer (Commerzbank), and Bayern Capital
  • 100% remote team with hubs in Munich, Berlin and London
  • Remote-only company; hiring only within EU time zones

Partners & customers

Alstin CapitalNeosfer (Commerzbank)Bayern Capital