Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Information Security Specialist role.

Rezi rewrites your resume against Secfix's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Information Security Specialist posting at Secfix — free, in seconds.

About the Role

This role is for a Senior Information Security Specialist to enhance Secfix's compliance function as the company expands its framework offerings, mid-market customer base, and compliance team. The position involves compliance delivery, content management, and team support, with significant influence on how Secfix provides compliance services and develops its platform content. You will work closely with the co-founder & CISO and the CS Lead.

Responsibilities

Own and drive the compliance roadmap within the Secfix platform across various frameworks.
Implement ISO 27001 and adjacent frameworks end-to-end for customers.
Mentor and upskill the compliance team, ensuring consistency in audits and deliverables.
Conduct internal audits for strategic customers and review junior team members' audits.
Act as a compliance partner to CSMs and sales reps, providing expert support.
Own the quality of compliance content in the platform, including policies and training materials.
Address framework gaps and integrate auditor feedback into team practices and platform improvements.
Partner with product and engineering to translate compliance gaps into product requirements.
Collaborate with CS, Product, and Founders to align priorities.
Deepen relationships with certification partners and train auditors on the Secfix platform.

Requirements

Fluent English is essential.
7+ years of hands-on information security and GRC experience in B2B SaaS.
Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company.
Hands-on experience with a GRC platform like Secfix, or similar.
Cloud infrastructure readiness across AWS, Azure, and GCP, including posture analysis and remediation planning.
Strong project management skills with the ability to break down initiatives, prioritize, and deliver.
Excellent written communication skills for producing clear compliance content.
Strong ownership mindset and ability to operate as a senior individual contributor.

Skills

Information Security
GRC (Governance, Risk Management, and Compliance)
B2B SaaS
ISO 27001
TISAX
SOC 2
GDPR
NIS 2
DORA
ISO 27017/27018
ISO 42001
C5
AWS
Azure
GCP
Project Management
Written Communication
Auditing
Mentoring

Location

Remote (+/- 2hrs from Germany GMT+1)
EU time zones

Work Type

Remote
100% remote work

Experience Level

Senior
7+ years of hands-on information security and GRC experience
Experience mentoring or coaching colleagues

Salary/Compensations

Industry-competitive local salaries

Benefits

100% remote work with a virtual office
Competitive salary
Generous equity package
Access to world-class mentors
€1,000 annual personal development budget
Home office budget
Access to co-working spaces
26 days holiday + local public holidays
Comprehensive health coverage
Annual retreat
Company-wide events
Latest tech equipment (MacBook, monitors, headphones)

About the Company

Secfix is automating security compliance in Europe, helping companies achieve and maintain certifications like ISO 27001, GDPR, TISAX, and SOC 2 efficiently.
The company operates with a 100% remote team and has hubs in Munich, Berlin, and London.
Secfix is a high-performing team focused on automating security and compliance for modern companies.
The company has successfully raised $12M in Series A funding from investors including Alstin Capital, Neosfer (Commerzbank), and Bayern Capital.

Equal Opportunity

We are an equal-opportunity employer and remote-only company.
At this time, we can support hiring only within EU time zones.