ISO 27001 Internal Auditor (German-speaking)

Own internal audits end to end for ISO 27001 certification. You audit what customers have built, review their evidence on the Secfix platform, and give them a clear report before their external audit. You assess what is missing and tell them in plain language exactly what to do about it.

What you'll do

• Own internal audits for customers end to end, from kickoff through to the final report they take into their external audit
• Review and sample evidence on the Secfix platform and assess it against the relevant ISO 27001 controls
• Run customer calls and walk customers through your findings and any non-conformities
• Catch the non-conformities that matter, including the easy ones, so nothing avoidable surfaces later in an external audit
• Write findings a non-technical founder can act on: what is missing, why it matters, and what to do next
• Keep several audits moving at once and keep every one on schedule
• Stay neutral to the implementation and hold a clean line between auditing and helping
• Learn other frameworks (TISAX, ISO 42001) and help build a repeatable audit structure for them

What you'll need

• German (C1/C2) and English (fluent)
• Up to 2 years of information security background
• Hands-on ISO 27001 internal audit experience, with at least 10+ internal audits you have personally run
• PECB ISO 27001 Lead Auditor certification or direct equivalent
• Direct experience auditing inside a modern GRC platform
• Clear, concrete written and spoken English, with the ability to explain complex requirements simply

Nice to have

• Experience auditing or implementing TISAX, ISO 42001, NIS2 or SOC 2
• Experience at an early-stage startup (Seed to Series B)
• Exposure to a modern SaaS product and cross-functional work with product teams

What they offer

• 100% remote work with virtual office in Gather
• Competitive local salaries at or above market rates
• Generous equity package
• €1,000 annual personal development budget
• 26 days holiday plus local public holidays
• Comprehensive health coverage and home office budget