Remote GRC Specialist: ISO 27001, GDPR, SOC 2 Champion EU

Remotely; United States; Remote; USD 104,000 - 138,000; Full time

Benefits offered by this job

Remote work 100%

Equity package

Development budget

Home office budget

26 days holidays

Health insurance

Annual retreat

Tech equipment

Job summary

Secfix is seeking a GRC Specialist to strengthen our compliance function as we scale frameworks and mid-market customers. You will own compliance knowledge in our platform, run internal audits, and support customer success and auditors.

You will work with the co-founder/CISO and CS Lead to influence how we deliver compliance as a service and in-app content. This is a high-impact role with ownership and cross-functional collaboration.

Qualifications

• German (C1) and English (fluent) are required.
• 3+ years of hands-on information security and GRC experience.
• Led at least 1 ISO 27001 certification project as implementer/auditor.
• Ran at least 2 internal audits.
• Hands on experience with a GRC platform.
• Depth in at least one framework beyond ISO 27001.

Responsibilities

• Own the quality and breadth of Secfix's compliance offering.
• Lead internal audits end to end for customers.
• Keep multiple audits moving on schedule.
• Implement ISO 27001 end-to-end for customers.
• Own compliance content in the platform (policies, checks, templates).
• Incorporate auditor feedback into practice and product improvements.
• Partner with product/engineering to translate gaps into work.
• Collaborate with CS, Product, and Founders on priorities.
• Train auditors and deepen partner relationships.

Skills

German (C1)

English (fluent)

GRC experience

Project management

Education

Bachelor's degree in CS/SE or equivalent

Tools

Secfix or similar

Job description

Secfix is seeking a GRC Specialist to strengthen our compliance function as we scale frameworks and mid-market customers. You will own compliance knowledge in our platform, run internal audits, and support customer success and auditors.

You will work with the co-founder/CISO and CS Lead to influence how we deliver compliance as a service and in-app content. This is a high-impact role with ownership and cross-functional collaboration.