Job
- Level
- Lead
- Location
- Berlin
- Working Model
- Full Remote
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will develop the compliance roadmap across various frameworks, conduct internal audits, and support the team in implementing complex compliance requirements while ensuring quality and consistency.
Job Technologies
Your role in the team
- We're hiring an Information Security Lead to strengthen our compliance function as Secfix scales into more frameworks, mid-market customers, and a growing compliance team.
- This role sits at the intersection of compliance delivery, content, and team support.
- You will own the compliance knowledge that resides within our platform, manage our compliance specialists, support our customer success team, and serve as the senior compliance voice for customers, auditors, and product.
- You will work closely with our co-founders and our CS Lead.
- This is a high-impact role with real influence on how Secfix delivers compliance: both as a service to customers and as content inside our app.
- You will own one of the most important pillars of Secfix: the quality and breadth of our compliance offering.
- You can test new approaches, but at the end of the day, you have full ownership of how you deliver results (with a strong support network from within and outside the company).
- You will: Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and more as we expand).
- Implement ISO 27001 and adjacent frameworks end-to-end for customers.
- Hire, manage and upskill the compliance team: sharing expertise, reviewing work, and helping drive consistency in audits and customer deliverables.
- Führen Sie interne Audits direkt bei strategischen und komplexen Kunden durch und überprüfen Sie die von Teammitgliedern durchgeführten internen Audits, um Qualität und Konsistenz zu fördern.
- Act as a compliance partner to CSMs and sales reps: fast, reliable support for customer questions, and joining customer calls when deep expertise is needed.
- Own the quality of compliance content in the platform (including creating policies, evidence templates, compliance-enabled playbooks for our CSMs, security awareness trainings and more).
- Schließen Sie Framework-Lücken und integrieren Sie Auditoren-Feedback sowohl in die Teampraktiken als auch in Plattformverbesserungen.
- Partner with product and engineering to translate compliance gaps into structured product work.
- Collaborate closely with Customer Service, Product, and Founders to align compliance, customer, and roadmap priorities.
- Deepen relationships with our existing certification partners and train auditors on the Secfix platform so they can confidently use it during customer audits.
This text has been machine translated. Show original
Our expectations of you
Education
- Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field.
Qualifications
- C1 or C2 English language proficiency is essential.
- English (fluent) is a must for this role.
- Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company.
- Strong project management skills with the ability to break down ambiguous initiatives into concrete deliverables, prioritise ruthlessly, and ship.
- Excellent written communication, especially in producing clear, precise compliance content for diverse audiences (auditors, founders, engineers).
- Strong ownership mindset: operates as a senior individual contributor without waiting for direction.
Experience
- 7+ years of hands-on information security and GRC experience in B2B SaaS, including at least 2 years in an InfoSec leadership role.
- Hands-on experience with a GRC platform like Secfix, or similar GRC platforms.
- Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning.
This text has been machine translated. Show original
What we offer
- Remote (+/- 2 hours from Germany, GMT+1).
- Remote Work: 100% remote work with a virtual office in Gather.
- Competitive Salary: Industry-competitive local salaries.
- We pay local rates that are at or above the market.
- Equity: Generous equity package - we're all owners of Secfix and beneficiaries of our collective success.
- Mentorship: We are backed by top VCs and accelerators and have direct access to world-class mentors.
- Development Budget: €1,000 annual personal development budget.
- Home Office Budget: Home office budget and access to co-working spaces.
- Holidays: 26 days holiday + local public holidays.
- Health Insurance: Comprehensive health coverage.
- Annual Retreat: Annual retreat to build connections and inspire ideas (this year we spent an amazing time in Alicante, Spain!).
- Company Events: Company-wide events to build relationships and have some fun!
- Tech Equipment: Latest tech equipment (MacBook, monitors, headphones).
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
Secfix GmbH
Secfix GmbH, headquartered in Munich, is an advanced company that develops software solutions for automating security and compliance processes. Their platform assists companies in efficiently meeting and maintaining the requirements of various standards and regulations. With a team operating in Munich, Berlin, and London, Secfix offers a contemporary solution to the challenges in IT security and data protection.
Description
- Company Type
- Startup
- Working Model
- Full Remote
- Industry
- Internet, IT, Telecommunication
Information Security Lead
- Location
- Berlin
- Working Model
- Full Remote
- Diversity
- Open for all genders
- English Only
- English only required
