(Junior) Information Security Officer GRC (f/m/x)

Link11; Frankfurt; Hybrid; EUR 40,000 - 60,000; Full time

Benefits offered by this job

Fitness benefits

JobRad

Daycare support

Job summary

Link11 is seeking an (Junior) Information Security Officer GRC to oversee audits, ISMS and governance across the organization. The role can be performed fully remote from Germany or Portugal, with responsibilities spanning compliance, risk management and security awareness.

The candidate should have 1–2 years in information security governance, a good grasp of GDPR/TOMs, and familiarity with AI governance. German language skills are a plus.

Qualifications

• 1 to 2 years of professional experience in information security governance, risk and compliance (GRC).
• Solid understanding of security fundamentals (access control, MFA, patch management, logging).
• Knowledge of GDPR and TOMs, EU AI Act familiarity.

Responsibilities

• Coordinate audits for ISO 27001, SOC 2, PCI DSS and BSI C5.
• Support NIS2 obligations and GDPR TOMs across the org.
• Run security awareness trainings and phishing simulations.
• Assist with access reviews, vulnerability management and incident follow-up.

Skills

English fluency

German knowledge

Education

ISO 27001 Lead Implementer / Lead Auditor

Tools

GRC tools

Job description

(Junior) Information Security Officer GRC (f/m/x)

Published on Oktober 17, 2026

• IT software

BE ONE STEP AHEAD: Help us make the Internet a safer place!

The digital world faces a constant storm of evolving cyber threats, and IT professionals are on the front lines, defending their organizations‘ most valuable assets against increasingly sophisticated attacks. At Link11, one of Europe’s leading providers of cybersecurity solutions, we know that pressure well. We protect companies and public authorities through meticulous attention to detail and the early adoption of cutting‑edge methods, and we take full responsibility for our customers‘ security.

Our market reputation is built on enterprise‑grade cybersecurity that keeps IT networks and critical applications safe, so our customers can focus on their core business. With AI‑driven technology and patented DDoS protection, and a portfolio spanning Network DDoS Protection, WAAP, Secure CDN and Secure DNS, we are constantly finding new and better ways to strengthen their defenses.

Above all, we are a team of passionate people united by one mission: to make the internet a safer place. More than 100 colleagues work across our international locations, including Frankfurt, Lisbon, Tel Aviv and Vancouver, many of them fully remote. Are you highly motivated and looking for a challenging, rewarding role where you can truly make a difference? Then you are very welcome at Link11. Shape our digital future with us.

At Link11, security is our product. Our customers buy our security posture along with our service, so our ISMS is a reason they choose us, not paperwork. As Information Security Officer (GRC), you run our ISMS, certifications and security awareness program and report to our VP Cybersecurity Strategy. You can work fully remote from Germany or Portugal.
Compliance & Audits:

• Coordinate audits for ISO 27001, SOC 2, PCI DSS and BSI C5, and track findings to closure.
• Maintain policies, the risk register and internal audits.
• Monitor controls in our compliance platform and close gaps together with control owners.

Regulation & Governance:

• Keep NIS2 obligations and GDPR TOMs in place, working with our external DPO.
• Support AI governance by assessing our internal use of AI against the EU AI Act and our AI policy.
• Review new vendors and tools for security and privacy risks.

Security Awareness & Collaboration:

• Run security awareness trainings and phishing simulations.
• Support Engineering and IT on access reviews, vulnerability management and incident follow up.
• Answer customer security questionnaires and keep our Trust Center up to date.

Automation:

• Use approved AI tools to automate repetitive work such as evidence collection, questionnaires and policy drafts, always with human review of every output.
• 1 to 2 years of professional experience in information security governance, risk and compliance (GRC).
• Practical experience with ISO 27001, ideally including active involvement in an audit.
• Solid understanding of security fundamentals such as access control, MFA, patch management, logging and cloud permissions, enabling you to assess whether evidence truly demonstrates an effective control.
• Working knowledge of GDPR and technical and organizational measures (TOMs), as well as familiarity with the EU AI Act.
• Experience using LLMs to work more efficiently, combined with a clear sense of where human review is essential.
• Residence in Germany or Portugal with the right to work there.
• Experience with SOC 2, PCI DSS, BSI C5 or NIS2 is a plus.
• An ISO 27001 Lead Implementer or Lead Auditor certification, or a comparable qualification, is a plus.
• Experience with GRC automation tools and a genuine interest in automating compliance processes are a plus. Scripting skills are welcome but not required .
• Fluent English and excellent communication skills, a structured way of working and strong attention to detail.
• German language skills are a plus.

Wir sind Link11:

• We live our startup mentality at heart. The professional framework gives us the growth and stability of Link11- founded in 2005. We are still strong today working alongside the founders and the management team.
• We are full of energy, have short decision‑making paths and bring changes directly on the way.
• We live a positive, interactive and appreciative working atmosphere in which all employees can contribute.
• We encourage the further development of our employees.
• We are willing to leave our comfort zone for innovation and improvement because we want to be the best in the market.
• We have received several awards for our forward‑looking solutions.
• Become part of a highly motivated team in which we treat each other with respect.
• Meet your colleagues at eye level. We are all equal and without barriers.
• Live and develop your strengths in a friendly atmosphere.
• Organise yourself in a flexible working model, because you are more than just your job.
• Lead us to success with your skills.
• Community is the trump card: team events, sundowners, after work parties bring us together (also internationally).
• Taking care of our team doesn’t end at the coffee machine or a filled fruit basket!
• Look forward to interesting benefits such as fitness, JobRad , support for daycare fees and much more. We are cooperation partners of national and international associations and authorities.

Do you have any questions about this position? Contact us directly at [e-mail]. Your contact person is Nadine Saewert from the People Management department.
We look forward to getting to know you and learning more about you as a person and your professional career.
Link11 GmbH
Lindleystrasse 12
D-60314 Frankfurt am Main