Specialist – Information Security Risk Management
jobs.com
CloudCyber Security
Information Security Specialist – CISO, GRC expert, German-speaking
Secfix
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇩🇪 Germany
Visit company websiteJob Level
Mid-LevelSenior
Tech Stack
AWSAzureCloudGoogle Cloud Platform
About the role
- Lead CISO‑style engagements for Secfix customers and turn frontline insights into product improvements as the GRC Subject Matter Expert for our new AI product. You’ll own results, make customers audit‑ready, and keep them compliant.
- Own the compliance lifecycle: drive onboarding → certification → continuous compliance; scope, SoA, risk treatment, evidence and CAPA; pass the audits; act as primary security point of contact
- Harden cloud infra posture fast: establish pragmatic readiness across AWS, Azure, and GCP using CIS benchmarks and scanners, and prioritize actionable remediation.
- Scale delivery & represent Secfix: evolve runbooks, templates, QA, and knowledge base; be our visible security voice with executives and in select public forums.
- Shape the AI product: collaborate with Product and Engineering to prioritize and ship features, translating frontline insights into our new AI product and future offerings.
Requirements
- German (C1/C2) and English (fluent) is a must for this role
- 5+ years of hands‑on information security and GRC experience
- Led 3+ successful ISO 27001 certification projects as implementor and/or auditor
- Hands on experience with a GRC platform—Secfix, or similar GRC platforms
- Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning
- Bonus
- You automated internal process, built own prototypes or tools for compliance before with code or no-code tools
- SOC 2 implementation and audit experience
- You acted as DPO before
Benefits
- 100% remote work - enhanced by our virtual office in Gather.
- Flexibility & Autonomy - we have core hours of 10am - 4pm CET but outside of this we trust you to work wherever/whenever you feel most productive.
- Industry-competitive base salary. We pay local rates that are at or above the market. We share this philosophy with GitLab.
- Generous equity package: we’re all owners of Secfix and benefit from our collective success.
- 26 days holiday, in addition to local Public Holidays.
- Health Insurance.
- A Personal Development Budget of 1,000 EUR per year - available for whatever you wish to support your health and fitness, mental health, and learning & development.
- Remote workspace budget to enhance your home office, and access to co-working spaces around the world should you need it.
- Annual retreat to build connections and inspire ideas - last year we headed to Portugal, this year we’ll be in Milan!
- Receive the latest tech equipment (MacBook, monitors, headphones).
- Company-Wide Events to foster collaboration, learn from each other and have some fun.
- We are backed by top VCs and accelerators. Get direct access to world-class mentors.
- Secfix is run by international founders in Germany. We can help you move to Germany and get a visa or just hire you locally with our partner Deel. And we have a track record! Our Customer Success Manager moved to Germany from Brazil and our Account Executive from LA.
- Have more ideas for perks? You can make them a reality at Secfix 🙂.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
information securityGRCISO 27001SOC 2cloud infrastructureposture analysisremediation planningautomationcompliance toolsno-code tools
Soft skills
leadershipcommunicationcollaborationcustomer engagementproblem-solvingorganizational skillspublic speakinginsight translationaudit readinessstakeholder management
Certifications
ISO 27001 certificationSOC 2 certification