ISO 27001 Internal Auditor

Own internal audits end to end for our customers. You audit what a customer has built, review their evidence on the Secfix platform, and give them a clear report before their external audit. This is a hands-on individual contributor role with full ownership of a function customers trust us with.

What you'll do

• Own internal audits for our customers end to end, from kickoff through to the final report they take into their external audit
• Review and sample evidence on the Secfix platform and assess it against the relevant ISO 27001 controls
• Run the customer calls and walk customers through your findings and any non-conformities
• Catch the non-conformities that matter, including the easy ones, so nothing avoidable surfaces later in an external audit
• Write findings a non-technical founder can act on: what is missing, why it matters, and what to do next
• Keep several audits moving at once and keep every one on schedule
• Stay neutral to the implementation and hold a clean line between auditing and helping
• Learn our other frameworks (TISAX, ISO 42001) and help build a repeatable audit structure for them

What you'll need

• Up to 2 years of information security background
• Hands-on ISO 27001 internal audit experience, with at least 10+ internal audits you have personally run
• A PECB ISO 27001 Lead Auditor certification or a direct equivalent
• Direct experience auditing inside a modern GRC platform
• Clear, concrete written and spoken English, with the ability to explain complex requirements simply

Nice to have

• Experience auditing or implementing TISAX, ISO 42001, NIS2 or SOC 2
• Experience at an early-stage startup (Seed to Series B)
• Exposure to a modern SaaS product and cross-functional work with product teams

What they offer

• 100% remote work with a virtual office in Gather
• Industry-competitive local salaries at or above market
• Generous equity package
• €1,000 annual personal development budget
• 26 days holiday + local public holidays
• Comprehensive health coverage