Job
- Level
- Lead
- Ort
- Berlin
- Arbeitsmodell
- Full Remote
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
Job Zusammenfassung
In dieser Rolle entwickelst du die Compliance-Roadmap für verschiedene Rahmenwerke, leitest interne Audits und unterstützt das Team bei der Umsetzung komplexer Compliance-Anforderungen, während du Qualität und Konsistenz sicherstellst.
Job Technologien
Deine Rolle im Team
- We're hiring an Information Security Lead to strengthen our compliance function as Secfix scales into more frameworks, mid-market customers, and a growing compliance team.
- This role sits at the intersection of compliance delivery, content, and team support.
- You'll own the compliance knowledge that lives inside our platform, manage our compliance specialists, support our customer success team, and act as the senior compliance voice for customers, auditors, and product.
- You'll work closely with our co-founders and our CS Lead.
- This is a high-impact role with real influence on how Secfix delivers compliance: both as a service to customers and as content inside our app.
- You will own one of the most important pillars of Secfix: the quality and breadth of our compliance offering.
- You can test new approaches, but at the end of the day, you have full ownership of how you deliver results (with a strong support network from within and outside the company).
- You will: Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and more as we expand).
- Implement ISO 27001 and adjacent frameworks end-to-end for customers.
- Hire, manage and upskill the compliance team: sharing expertise, reviewing work, and helping drive consistency in audits and customer deliverables.
- Conduct internal audits directly for strategic and complex customers, and review the internal audits performed by team members to drive quality and consistency.
- Act as a compliance partner to CSMs and sales reps: fast, reliable support for customer questions, and joining customer calls when deep expertise is needed.
- Own the quality of compliance content in the platform (including creating policies, evidence templates, compliance-enabled playbooks for our CSMs, security awareness trainings and more).
- Close framework gaps and incorporate auditor feedback into both team practice and platform improvements.
- Partner with product and engineering to translate compliance gaps into structured product work.
- Collaborate closely with CS, Product, and Founders to align compliance, customer, and roadmap priorities.
- Deepen relationships with our existing certification partners and train auditors on the Secfix platform so they can confidently use it during customer audits.
Unsere Erwartungen an dich
Ausbildung
- Bachelor's degree in Computer Science, Information Technology, Software Engineering or a related field.
Qualifikationen
- C1 or C2 English language proficiency is essential.
- English (fluent) is a must for this role.
- Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company.
- Strong project management skills with the ability to break down ambiguous initiatives into concrete deliverables, prioritise ruthlessly, and ship.
- Excellent written communication, especially in producing clear, precise compliance content for diverse audiences (auditors, founders, engineers).
- Strong ownership mindset: operates as a senior individual contributor without waiting for direction.
Erfahrung
- 7+ years of hands-on information security and GRC experience in B2B SaaS, including at least 2 years in an InfoSec leadership role.
- Hands-on experience with a GRC platform like Secfix, or similar GRC platforms.
- Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning.
Unser Angebot
- Remote (+/- 2hrs from Germany, GMT+1).
- Remote Work: 100% remote work with a virtual office in Gather.
- Competitive Salary: Industry-competitive local salaries.
- We pay local rates that are at or above the market.
- Equity: Generous equity package - we're all owners of Secfix and beneficiaries of our collective success.
- Mentorship: We are backed by top VCs and accelerators and have direct access to world-class mentors.
- Development Budget: €1,000 annual personal development budget.
- Home office Budget: Home office budget and access to co-working spaces.
- Holidays: 26 days holiday + local public holidays.
- Health Insurance: Comprehensive health coverage.
- Annual Retreat: Annual retreat to build connections and inspire ideas (this year we spent an amazing time in Alicante, Spain!).
- Company Events: Company-wide events to build relationships and have some fun!
- Tech Equipment: Latest tech equipment (MacBook, monitors, headphones).
Benefits
Work-Life-Integration
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Secfix GmbH
Die Secfix GmbH mit Hauptsitz in München ist ein fortschrittliches Unternehmen, das Softwarelösungen zur Automatisierung von Sicherheits- und Compliance-Prozessen entwickelt. Ihre Plattform hilft Firmen, die Anforderungen verschiedener Standards und Vorschriften effizient zu erfüllen und langfristig einzuhalten. Mit einem Team, das in München, Berlin und London arbeitet, bietet Secfix eine zeitgemäße Lösung für die Herausforderungen in der IT-Sicherheit und im Datenschutz.
Description
- Unternehmenstyp
- Startup
- Arbeitsmodell
- Full Remote
- Branche
- Internet, IT, Telekom
Information Security Lead
- Ort
- Berlin
- Arbeitsmodell
- Full Remote
- Diversität
- Für alle Personen geeignet (m/w/d)
- Nur Englisch
- Nur Englisch erforderlich
