Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Information Security Lead role.
Rezi rewrites your resume against Secfix's job description. Free.
Tailor your resume to this Information Security Lead role.
Rezi rewrites your resume against Secfix's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Information Security Lead posting at Secfix — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Information Security Lead posting at Secfix — free, in seconds.
About the Role
We are hiring a Senior Information Security Specialist to strengthen our compliance function as Secfix scales. This role sits at the intersection of compliance delivery, content, and team support. You will own the compliance knowledge within our platform, mentor junior specialists, support customer success, and act as the senior compliance voice for customers, auditors, and product. You'll work closely with our co-founder & CISO and our CS Lead, influencing how Secfix delivers compliance.
Responsibilities
- Own and drive the compliance roadmap inside the Secfix platform across various compliance frameworks.
- Implement ISO 27001 and adjacent frameworks end-to-end for customers.
- Mentor and upskill the compliance team, sharing expertise and reviewing work.
- Conduct internal audits for strategic and complex customers and review audits performed by junior team members.
- Act as a compliance partner to CSMs and sales reps, providing fast, reliable support and joining customer calls when needed.
- Own the quality of compliance content in the platform, including creating policies, evidence templates, and training materials.
- Close framework gaps and incorporate auditor feedback into team practice and platform improvements.
- Partner with product and engineering to translate compliance gaps into structured product work.
- Collaborate closely with CS, Product, and Founders to align compliance, customer, and roadmap priorities.
- Deepen relationships with certification partners and train auditors on the Secfix platform.
Requirements
- Fluent English is essential.
- 7+ years of hands-on information security and GRC experience in B2B SaaS.
- Led 5+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company.
- 2+ years of people/team management experience.
- Hands-on experience with a GRC platform like Secfix, or similar GRC platforms.
- Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning.
- Strong project management skills with the ability to break down ambiguous initiatives into concrete deliverables, prioritize, and ship.
- Excellent written communication skills, especially in producing clear, precise compliance content for diverse audiences.
- Strong ownership mindset: operates as a senior individual contributor without waiting for direction.
Skills
- Information Security
- GRC
- B2B SaaS
- ISO 27001
- TISAX
- SOC 2
- GDPR
- NIS 2
- DORA
- ISO 27017/27018
- ISO 42001
- C5
- AWS
- Azure
- GCP
- Project Management
- Written Communication
Location
- Remote (+/- 2hrs from Germany GMT+1)
- EU time zones
Work Type
- Remote
- 100% remote work
Experience Level
- Senior
- 7+ years of hands-on information security and GRC experience
- 2+ years of people/team management experience
Salary/Compensations
- Competitive Salary: Industry-competitive local salaries. We pay local rates that are at or above the market.
Benefits
- Equity: Generous equity package
- Mentorship: Backed by top VCs and accelerators with access to world-class mentors
- Development Budget: €1,000 annual personal development budget
- Home office Budget
- Access to co-working spaces
- Holidays: 26 days holiday + local public holidays
- Health Insurance: Comprehensive health coverage
- Annual Retreat
- Company Events
- Tech Equipment: Latest tech equipment (MacBook, monitors, headphones)
About the Company
- At Secfix, we’re at the forefront of automating security compliance in Europe.
- We help companies get and stay ISO 27001, GDPR, TISAX, and SOC 2 fast and easy and reduce hundreds of hours of manual work.
- Secfix is run by a 100% remote team with hubs in Munich, Berlin and London.
- We’re a high-performing team looking for passionate, execution-focused, owners to help us automate security and compliance for modern companies and become the European compliance automation leader.
- We’ve just raised our $12M Series A and are backed by top VCs, including Alstin Capital, Neosfer (Commerzbank), and Bayern Capital.
Equal Opportunity
- We are an equal-opportunity employer and remote-only company.