Information Security Governance Specialist

📋 Description

• Own customer security assurance; manage security questionnaires and audits.
• Drive daily operation and improvement of ISO 27001, SOC 2, TISAX programs.
• Be SME during audits; ensure controls are audit-ready.
• Automate evidence collection and control monitoring in GRC.
• Design AI-enabled GRC workflows using LLMs for governance.
• Strengthen vendor risk management with automation and human review.

🎯 Requirements

• 5+ years in information security governance, GRC, or tech risk.
• SME in SOC 2 and ISO 27001 audits; TISAX or Microsoft SSPA a plus.
• Hands-on with GRC platforms (Vanta, Conveyor); automation-focused.
• Able to communicate risk to tech and business teams; entrepreneurial mindset; AI in compliance.
• Certifications such as CISA, CISM, CISSP, CIPP or similar are a plus.
• English fluency; German a plus; hybrid work with weekly London office.

🎁 Benefits

• Private health benefits and health cash plan
• Pension scheme: 5% matched
• Minimum 25 days annual leave
• Paid educational and wellbeing days off
• Workation: 45 days annually
• Home office setup budget and weekly office lunch