Secfix
Information Security Specialist (German-speaking)
3 days ago Be among the first 25 applicants
Note: While we prefer a full-time commitment, we also offer this role for contractors, on 25+ hours-per-week basis in the first few months.
Our customers are at the heart of everything we do at Secfix, and we’re looking for a star player to support customers from the DACH region. As an Information Security Specialist, you’ll own the security & compliance lifecycle end‑to‑end—from day 1 onboarding through certification and continuous compliance. You’ll act as a trusted advisor to startups, scaleups and German Mittelstand, improve processes, collaborate across teams, and contribute to a new, exciting AI product. You’ll get generous equity and benefits, a 100% remote environment, and the chance to grow with a smart, fun, dedicated team.
About Secfix At Secfix, we’re building something ambitious: a powerful platform that makes security compliance fast and stress-free for growing companies in Europe. We’ve already helped dozens of startups and scaleups in the DACH region get audit-ready in record time — and we’re just getting started. We’re backed by top VCs (Octopus Ventures, Commerzbank’s Neosfer) and founders from unicorns like Signavio. The market is massive ($97B+), and we’re leading the way with a smart, lean team of 20 (and growing).
What you’ll do The Information Security Specialist at Secfix is part vCISO, part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, work with clients to implement recommendations and act as their auditor liaison. Aside from the day to day work, you'll be working closely with our CTO on new AI product features.
Own the compliance lifecycle:
run onboarding → certification → continuous compliance; scope controls (SoA), drive risk treatment, evidence and gap closure; draft customer roadmaps; lead audits to a clean pass as the primary security point of contact.
Harden tech stack:
assess posture and map controls to AWS/Azure/GCP, Kubernetes/Docker/Terraform; draft new best practices; prioritize actionable remediation with clear timelines.
Apply deep framework expertise:
tailor programs across ISO 27001, SOC 2, NIST, and more frameworks, aligning requirements to each customer’s environment and objectives.
Scale delivery & represent Secfix:
build/run runbooks, templates, QA, and knowledge base; communicate with executives and, when needed, represent Secfix in select public forums.
Shape the AI product & platform:
turn frontline insights into crisp requirements; partner with Product and Engineering to prioritize and ship features that accelerate evidence, controls, and remediation.
Qualifications
German (C1/C2) and English (fluent) is a must for this role.
3+ years of hands‑on information security and GRC experience, ideally with Big 4 consulting or in‑house audit at a high‑growth SaaS.
Led 3+ successful ISO 27001 certification projects as an implementer and/or auditor.
Hands on experience with a GRC platform—Secfix, or similar GRC platforms.
Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning.
Bonus
You have automated internal processes and built your own prototypes or tools for compliance before with code or no‑code tools.
SOC 2 implementation and audit experience.
You acted as DPO before.
Not for the right fit
Lead customer‑side audits end to end, confidently answering auditor questions under pressure.
Build and automate new internal processes.
Draft, create security policies, custom security documents and answer security questionnaires, cross‑map controls.
Get onboarded into a new regulation or infosec standards.
Create lists of relevant cloud security hardening tasks for AWS, Azure and GCP.
Benefits you get at Secfix
100% remote work - enhanced by our virtual office in Gather.
Flexibility & Autonomy - we have core hours of 10am - 4pm CET but outside of this we trust you to work wherever/whenever you feel most productive.
Industry-competitive base salary. We pay local rates that are at or above the market.
Generous equity package: we’re all owners of Secfix and benefit from our collective success.
26 days holiday, in addition to local Public Holidays.
Health Insurance.
A Personal Development Budget of 1,000 EUR per year.
Remote workspace budget to enhance your home office, and access to co-working spaces around the world.
Annual retreat to build connections and inspire ideas.
Receive the latest tech equipment (MacBook, monitors, headphones).
Company-Wide Events to foster collaboration.
We are backed by top VCs and accelerators. Get direct access to world‑class mentors.
Secfix is run by international founders in Germany. We can help you move to Germany and get a visa or hire you locally with our partner Deel.
Have more ideas for perks? You can make them a reality at Secfix.
Interview Process
15 min — Intro call with talent team.
30 min — Meet our co-founder & CTO.
1.5 hr — Assessment review and interview with our CEO and CISO.
45 min — Final “Virtual On‑Site” with team & Co‑Founders in Gather.
Job details Seniority Level: Entry level
Employment Type: Full-time
Job Function: Information Technology
Industries: IT Services and IT Consulting
Please note: We are an equal‑opportunity employer and remote‑only company. At this time, we can support hiring only within EU time zones. We work in sync using Gather as our virtual office.
#J-18808-Ljbffr
3 days ago Be among the first 25 applicants
Note: While we prefer a full-time commitment, we also offer this role for contractors, on 25+ hours-per-week basis in the first few months.
Our customers are at the heart of everything we do at Secfix, and we’re looking for a star player to support customers from the DACH region. As an Information Security Specialist, you’ll own the security & compliance lifecycle end‑to‑end—from day 1 onboarding through certification and continuous compliance. You’ll act as a trusted advisor to startups, scaleups and German Mittelstand, improve processes, collaborate across teams, and contribute to a new, exciting AI product. You’ll get generous equity and benefits, a 100% remote environment, and the chance to grow with a smart, fun, dedicated team.
About Secfix At Secfix, we’re building something ambitious: a powerful platform that makes security compliance fast and stress-free for growing companies in Europe. We’ve already helped dozens of startups and scaleups in the DACH region get audit-ready in record time — and we’re just getting started. We’re backed by top VCs (Octopus Ventures, Commerzbank’s Neosfer) and founders from unicorns like Signavio. The market is massive ($97B+), and we’re leading the way with a smart, lean team of 20 (and growing).
What you’ll do The Information Security Specialist at Secfix is part vCISO, part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, work with clients to implement recommendations and act as their auditor liaison. Aside from the day to day work, you'll be working closely with our CTO on new AI product features.
Own the compliance lifecycle:
run onboarding → certification → continuous compliance; scope controls (SoA), drive risk treatment, evidence and gap closure; draft customer roadmaps; lead audits to a clean pass as the primary security point of contact.
Harden tech stack:
assess posture and map controls to AWS/Azure/GCP, Kubernetes/Docker/Terraform; draft new best practices; prioritize actionable remediation with clear timelines.
Apply deep framework expertise:
tailor programs across ISO 27001, SOC 2, NIST, and more frameworks, aligning requirements to each customer’s environment and objectives.
Scale delivery & represent Secfix:
build/run runbooks, templates, QA, and knowledge base; communicate with executives and, when needed, represent Secfix in select public forums.
Shape the AI product & platform:
turn frontline insights into crisp requirements; partner with Product and Engineering to prioritize and ship features that accelerate evidence, controls, and remediation.
Qualifications
German (C1/C2) and English (fluent) is a must for this role.
3+ years of hands‑on information security and GRC experience, ideally with Big 4 consulting or in‑house audit at a high‑growth SaaS.
Led 3+ successful ISO 27001 certification projects as an implementer and/or auditor.
Hands on experience with a GRC platform—Secfix, or similar GRC platforms.
Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning.
Bonus
You have automated internal processes and built your own prototypes or tools for compliance before with code or no‑code tools.
SOC 2 implementation and audit experience.
You acted as DPO before.
Not for the right fit
Lead customer‑side audits end to end, confidently answering auditor questions under pressure.
Build and automate new internal processes.
Draft, create security policies, custom security documents and answer security questionnaires, cross‑map controls.
Get onboarded into a new regulation or infosec standards.
Create lists of relevant cloud security hardening tasks for AWS, Azure and GCP.
Benefits you get at Secfix
100% remote work - enhanced by our virtual office in Gather.
Flexibility & Autonomy - we have core hours of 10am - 4pm CET but outside of this we trust you to work wherever/whenever you feel most productive.
Industry-competitive base salary. We pay local rates that are at or above the market.
Generous equity package: we’re all owners of Secfix and benefit from our collective success.
26 days holiday, in addition to local Public Holidays.
Health Insurance.
A Personal Development Budget of 1,000 EUR per year.
Remote workspace budget to enhance your home office, and access to co-working spaces around the world.
Annual retreat to build connections and inspire ideas.
Receive the latest tech equipment (MacBook, monitors, headphones).
Company-Wide Events to foster collaboration.
We are backed by top VCs and accelerators. Get direct access to world‑class mentors.
Secfix is run by international founders in Germany. We can help you move to Germany and get a visa or hire you locally with our partner Deel.
Have more ideas for perks? You can make them a reality at Secfix.
Interview Process
15 min — Intro call with talent team.
30 min — Meet our co-founder & CTO.
1.5 hr — Assessment review and interview with our CEO and CISO.
45 min — Final “Virtual On‑Site” with team & Co‑Founders in Gather.
Job details Seniority Level: Entry level
Employment Type: Full-time
Job Function: Information Technology
Industries: IT Services and IT Consulting
Please note: We are an equal‑opportunity employer and remote‑only company. At this time, we can support hiring only within EU time zones. We work in sync using Gather as our virtual office.
#J-18808-Ljbffr