Senior Information Security & Compliance Lead — Remote EU

Secfix; Germany (OH); Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote work

Equity

Mentorship

Development budget

Home office budget

26 days holiday

Health insurance

Annual retreat

Company-wide events

Tech equipment

Job summary

Secfix, a European security compliance automation company, is seeking a Senior Information Security Specialist to strengthen the compliance function as it scales. You will own the compliance knowledge inside our platform, mentor junior specialists, and partner with customers, auditors, and product teams to deliver end-to-end ISO 27001 and adjacent frameworks.

You will work with the CS Lead and co-founders, testing new approaches while owning outcomes, and contributing to a growing, remote-first

Qualifications

• English (fluent) is a must for this role.
• 7+ years of hands‑on information security and GRC experience in B2B SaaS.
• Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid‑market company.
• Hands on experience with a GRC platform like Secfix, or similar GRC platforms.
• Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning.
• Strong project management skills with the ability to break down ambiguous initiatives into concrete deliverables, prioritizes ruthlessly, and ships.
• Excellent written communication, especially in producing clear, precise compliance content for diverse audiences (auditors, founders, engineers).
• Strong ownership mindset: operates as a senior individual contributor without waiting for direction.

Responsibilities

• Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and more as we expand)
• Implement ISO 27001 and adjacent frameworks end-to-end for customers
• Mentor and upskill the compliance team: sharing expertise, reviewing work, and helping drive consistency in audits and customer deliverables
• Conduct internal audits directly for strategic and complex customers, and review the internal audits performed by junior team members to drive quality and consistency
• Act as a compliance partner to CSMs and sales reps: fast, reliable support for customer questions, and joining customer calls when deep expertise is needed
• Own the quality of compliance content in the platform (including creating policies, evidence templates, Compliance enable playbooks for our CSMs, security awareness trainings and more)
• Close framework gaps and incorporate auditor feedback into both team practice and platform improvements
• Partner with product and engineering to translate compliance gaps into structured product work
• Collaborate closely with CS, Product, and Founders to align compliance, customer, and roadmap priorities
• Deepen relationships with our existing certification partners and train auditors on the Secfix platform so they can confidently use it during customer audits

Skills

Information security

GRC experience

English fluent

Tools

GRC platform

Job description

Secfix, a European security compliance automation company, is seeking a Senior Information Security Specialist to strengthen the compliance function as it scales. You will own the compliance knowledge inside our platform, mentor junior specialists, and partner with customers, auditors, and product teams to deliver end-to-end ISO 27001 and adjacent frameworks.

You will work with the CS Lead and co-founders, testing new approaches while owning outcomes, and contributing to a growing, remote-first