Information Security Governance Specialist

📋 Description

• Own customer security assurance; handle questionnaires, due diligence, audits.
• Drive day-to-day ops of compliance programs: ISO 27001, SOC 2, TISAX, regs.
• Serve as SME during audits; ensure control environment audit-ready.
• Transform compliance into a continuous process via automation and AI in Vanta GRC.
• Design AI-enabled GRC workflows; leverage LLMs for policy and risk tasks.
• Strengthen vendor risk management by scaling assessments with automation.

🎯 Requirements

• 5+ years in information security governance, GRC, or tech risk in SaaS/cloud.
• SOC 2 and ISO 27001 audits SME; work directly with auditors.
• TISAX or Microsoft SSPA experience a plus.
• Hands-on with GRC platforms (Vanta, Conveyor); automate governance.
• AI for compliance; balance automation with human judgment.
• Fluent English; German a plus; certifications like CISA/CISM/CISSP/CIPP a plus.

🎁 Benefits

• 25 days annual leave per year
• Parental, family care, and bereavement leave
• Sickness benefits and accident insurance
• Home office setup budget
• Pension fund contributions
• Workation: up to 45 days per year