Information Security Specialist (German-speaking)(m/w/x)

Beschreibung

As an Information Security Specialist, you will manage the entire security and compliance lifecycle, working closely with clients to enhance their frameworks and ensure adherence to regulations. This role involves collaborating on AI product features while leading audits and shaping security policies in a fully remote environment.

Anforderungen

• •Fluency in German (C1/C2) and English
• •Fluency in German (C1/C2) and English
• •3+ years of hands-on information security and GRC experience
• •Experience leading ISO 27001 certification projects
• •Hands-on experience with a GRC platform—Secfix or similar
• •Cloud infrastructure readiness across AWS, Azure, and GCP
• •Experience automating internal processes and building prototypes
• •SOC 2 implementation and audit experience
• •Experience acting as DPO

Aufgaben

• •Own the compliance lifecycle from onboarding to certification and continuous compliance
• •Scope controls and drive risk treatment, evidence, and gap closure
• •Draft customer roadmaps for security improvements
• •Lead audits to ensure a clean pass as the primary security contact
• •Assess tech stack posture and map controls to AWS, Azure, GCP, Kubernetes, Docker, and Terraform
• •Draft new best practices for security
• •Prioritize actionable remediation with clear timelines
• •Tailor security programs across ISO 27001, SOC 2, NIST, and other frameworks
• •Align security requirements to each customer's environment and objectives
• •Build and run runbooks, templates, QA, and knowledge base
• •Communicate with executives and represent Secfix in select public forums
• •Translate frontline insights into clear requirements for the AI product
• •Collaborate with Product and Engineering to prioritize and ship features
• •Lead customer-side audits, confidently answering auditor questions
• •Build and automate new internal processes
• •Draft security policies and custom security documents
• •Answer security questionnaires and cross-map controls
• •Get onboarded into new regulations or infosec standards
• •Create lists of relevant cloud security hardening tasks for AWS, Azure, and GCP

Tools & Technologien

Benefits