GRC Specialist (Governance Risk and Compliance) (Fully Remote)

Secfix; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Annual development budget

Home office budget

Co-working spaces

Health insurance

Generous equity

Job summary

Secfix, a 100% remote security compliance company, seeks a senior GRC lead to build and maintain compliance frameworks (ISO 27001, SOC 2, GDPR, TISAX, NIS 2) for customers. You will run internal audits, drive ISO 27001 end-to-end projects, and create policies, automated checks, and training to support clients and internal teams.

Fluency in German (C1/C2) and English is required, with 3+ years of GRC experience and at least one ISO 27001 certification project.

Qualifications

• 3+ years of hands-on GRC experience and at least one ISO 27001 certification project.
• Strong project management and written communication skills.

Responsibilities

• Build and maintain compliance frameworks (ISO 27001, SOC 2, GDPR, etc.).
• Run internal audits and implement ISO 27001 end-to-end for customers.
• Create policies, automated checks, and training content to support customers and internal teams.

Skills

GRC experience

Policy creation

Project management

Written communication

Job description

• Strengthen the compliance function as Secfix scales into more frameworks and mid-market customers.
• Act as the compliance voice for customers, auditors, and product, working closely with the CISO and CS Lead.

Responsibilities:

• Build and maintain compliance frameworks, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, and more.
• Run internal audits and implement ISO 27001 end-to-end for customers.
• Create policies, automated checks, and training content to support customers and internal teams.

Qualifications:

• German (C1/C2) and English (fluent) required.
• 3+ years of hands-on GRC experience and at least one successful ISO 27001 certification project.
• Strong project management and written communication skills, with the ability to break down complex tasks.
• 100% remote work, competitive salary, and generous equity.
• Annual development budget, home office budget, and access to co-working spaces.
• 26 days holiday plus local public holidays, comprehensive health insurance, and annual company retreat.

Secfix

Secfix automates security compliance for European companies, helping them achieve ISO 27001, GDPR, TISAX, and SOC 2 efficiently. They are a 100% remote team with hubs in Munich, Berlin, and London, recently raised a $12M Series A, and are backed by top VCs.