Job
- Level
- Senior
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security, Test/QA
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- 76.000 to 106.000€ gross/year
Job Summary
In this role, you will automate evidence collection for GRC, configure the platform, create evidence plugins, and integrate data sources to ensure efficient compliance adherence.
Job Technologies
Your role in the team
- Automate evidence collection. Configure and operate the GRC automation platform: wire up data sources, build evidence plugins, scope data sets, author analysis rules, and stand up continuous monitoring operations, replacing screenshot-and-upload workflows with automated collectors mapped to controls.
- Automate GRC workflows and run compliance as code. Use Claude Code (or similar) and MCPs for evidence requests, control mapping, gap analysis, vendor reviews, and reporting; build and curate the team's agent harness; and manage policies, control definitions, and automation in GitHub through branches, pull requests, and review.
- Design control testing and drive remediation. Instrument testing across SOC 2, ISO 27001, ISO 27017/27018, ISO 27701, PCI DSS, and ISO 42001 for continuous assurance rather than point-in-time snapshots, and work with control owners and engineering to close gaps with automated evidence behind every finding.
- You will be configuring our GRC automation platform, not just clicking through it, within your first few weeks. In your first 90 days, we'd expect you to learn the platform configuration, ship your first automated evidence collectors, retire a batch of manual screenshot evidence, and get at least one agent-assisted workflow running end-to-end.
- You will design the automation architecture for compliance across four products, rather than maintaining an existing checklist.
- You get the mandate and the tooling to retire manual evidence collection: a GRC automation platform, agentic AI, and compliance-as-code.
- We actually run LLMs and AI agents in production GRC workflows today. This is how the team operates day-to-day.
- Kleines Team, hohe Eigenverantwortung und direkte Verbindung zur Geschäftsleitung für Recht und Engineering. Du gestaltest das Programm aktiv mit, nicht nur dessen Bestand.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- 1+ year using agentic AI systems (Claude Code, Codex, etc.) to do real compliance work, with automation you have delivered, not just prototypes.
- Comfortable in GitHub: repositories, branches, pull requests, and code review. CI/CD familiarity is a strong plus.
- Fast on new tooling. You can pick up a GRC automation platform and be productive in weeks, configuring it directly rather than relying on others to do so.
- Deep GRC fluency: control design, evidence, risk, and how auditors actually think.
- Working knowledge of cloud (AWS/Azure/GCP): IAM, compute, storage, networking, and security controls, because that's where the evidence lives.
- Systems thinker who prefers to automate repetitive manual work rather than repeat it.
- Reads APIs, JSON, and logs comfortably; scripting (Python, bash, TypeScript).
- Zertifizierungen wie CISA, CISSP, ISO 27001 Lead Auditor oder ähnliche.
- AI governance, AI risk management, or ISO 42001 exposure.
- Background in a technology, SaaS, or engineering-adjacent environment.
Experience
- 5+ Jahre Erfahrung in Compliance, GRC oder IT-Audit, praktische Kenntnisse mit den oben genannten Frameworks (SOC 2, ISO 27001, PCI DSS und angrenzende).
- Prior hands-on experience with a GRC automation platform (Vanta, Drata, or similar).
- Scripting/light coding and API integration experience.
This text has been machine translated. Show original
What we offer
- Superhuman offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that helps foster trust, innovation, and a strong team culture.
- Professional growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being. We also support professional development and advancement with training, coaching, and regular feedback.
- A connected team: Superhuman builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first hybrid model enables a highly collaborative culture supported by our values. We work to foster belonging among team members in a variety of ways. This includes our employee resource groups, Superhuman Circles, which promote connection among those with shared identities including BIPOC and LGBTQIA+ team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs.
- Umfassende Leistungen für Kandidaten mit Wohnsitz in Deutschland: Superhuman bietet allen Teammitgliedern wettbewerbsfähige Bezahlung sowie ein Leistungspaket, das Lebensvorsorge (einschließlich psychischer Gesundheitsversorgung und Risikoleistungen) und großzügige sowie festgelegte Urlaubszeiten umfasst. Wir unterstützen auch beim Einrichten eines Home-Office, bieten Wellness- und Haustierpflegezuschüsse, Weiterbildungs- und Entwicklungsmöglichkeiten und mehr.
- Relocation Support: Superhuman provides comprehensive relocation support to make your move to Berlin seamless. Our package includes visa assistance, destination services to help you and your family settle in comfortably, and a relocation bonus to cover additional expenses, such as temporary housing.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
Superhuman
Superhuman is a software company that provides an AI productivity suite for individuals and teams. The platform integrates features for writing assistance, collaborative workspaces, inbox management, and proactive AI support. The company targets users who want to optimize their workflows across various apps and websites.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
GRC Automation Analyst
- Salary
- 76.000 to 106.000€ gross/yearEstimated net salary based on the gross salary in the job ad using tax class I.45.897 to 61.124 € net/year · Tax class I
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
- English Only
- English only required
