Senior InfoSec & Compliance Lead (Remote + Equity)

Secfix; Finland; Remote; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Remote Work

Equity

Mentorship

Development Budget

Home office Budget

26 days holidays

Health Insurance

Annual Retreat

Company events

Tech equipment

Job summary

Secfix, a Europe-focused compliance automation company, is hiring a Senior Information Security Specialist. You will own the compliance knowledge within our platform, mentor junior specialists, support customer success, and serve as the senior voice for customers, auditors, and product.

Collaboration with the CISO and CS Lead is key. You will drive ISO 27001 and adjacent frameworks end-to-end, partner with product/engineering, and guide audits and customer engagements.

Qualifications

• German (C1/C2) and English (fluent) are required.
• 5+ years of hands-on information security and GRC in B2B SaaS.
• Led 3+ ISO 27001 certification projects as an implementer/auditor.
• Hands-on experience with a GRC platform like Secfix or similar.
• Cloud infrastructure readiness across AWS, Azure, and GCP; posture analysis.
• Strong project management: break down initiatives and deliver.
• Excellent written communication for diverse audiences (auditors, founders, engineers).
• Strong ownership mindset as a senior IC.

Responsibilities

• Own and drive the compliance roadmap across ISO 27001, TISAX, SOC 2, GDPR and more.
• Implement ISO 27001 end-to-end for customers.
• Mentor the compliance team and ensure audit quality.
• Lead internal audits for strategic customers and review junior audits.
• Act as a compliance partner to CS and sales, joining calls when needed.
• Own content quality in the platform: policies, templates, playbooks, trainings.
• Close framework gaps and feed auditor feedback into product and processes.
• Collaborate with product/engineering to translate gaps into work items.

Skills

German proficiency

English fluency

Information security

GRC experience

ISO 27001

Auditing

GRC platforms

Project management

Technical writing

Ownership mindset

Tools

Secfix / GRC platform

AWS/Azure/GCP

Posture analysis tools

Job description

Secfix, a Europe-focused compliance automation company, is hiring a Senior Information Security Specialist. You will own the compliance knowledge within our platform, mentor junior specialists, support customer success, and serve as the senior voice for customers, auditors, and product.

Collaboration with the CISO and CS Lead is key. You will drive ISO 27001 and adjacent frameworks end-to-end, partner with product/engineering, and guide audits and customer engagements.