GRC Specialist (German-speaking)

Role overview Join a remote-first compliance automation team as a German-speaking GRC Specialist who owns the quality and breadth of a compliance platform serving European customers. This is an individual-contributor role that blends audit delivery, framework implementation, and content ownership across ISO 27001, TISAX, SOC 2, GDPR, and emerging standards, partnering closely with product, engineering, and customer success leadership.

Responsibilities - Build and maintain compliance frameworks inside the platform, expanding coverage across ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and adjacent standards. - Run internal audits end to end for customers, from kickoff through the final report handed to the external auditor, while keeping multiple audits on schedule in parallel. - Implement ISO 27001 and related frameworks end to end for clients, closing gaps and folding auditor feedback into both team practice and platform improvements. - Own the quality of platform content, including policies, automated checks, evidence templates, CSM enablement playbooks, and security awareness training. - Translate compliance gaps into structured product requirements by partnering with product and engineering, and collaborate with CS and founders to align customer and roadmap priorities. - Deepen relationships with certification partners and train external auditors on platform usage during customer audits.

Requirements - German at C1/C2 and fluent English, both required. - Bachelor's degree in computer science, software engineering, or a related technical field, or equivalent hands-on experience. - Three or more years of hands-on information security and GRC experience. - Led at least one successful ISO 27001 certification project as an implementer or auditor at a startup or mid-market company. - Run at least two internal audits to completion. - Hands-on experience with a GRC platform, plus real depth in at least one framework beyond ISO 27001 such as TISAX, SOC 2, GDPR, or NIS 2. - Strong project management, written communication, and an ownership mindset suited to autonomous work.

Nice to have - Experience mentoring or coaching colleagues in compliance, audit, or GRC contexts. - Startup environment experience. - PECB ISO 27001 Lead Auditor certification or an equivalent credential.

Benefits and work setup - 100% remote role with a virtual office; eligibility from UK, Germany, Austria, Poland, or Serbia. - Local-market salaries at or above market rate, plus a generous equity package. - €1,000 annual personal development budget, home office budget, and co-working access. - 26 days of holiday plus local public holidays, comprehensive health insurance, and latest tech equipment provided. - Annual team retreat and company-wide events.