Governance, Risk and Compliance Engineer (gn) | Leipzig | Köthen | München
Core
Supporting the company's first ISO 27001 certification, managing IT audits, and establishing Information Security Management System (ISMS) controls and processes.
Role type
Governance, Risk, and Compliance (GRC) Engineer
Builds
Audit-ready documentation, risk assessments, and security policies for a B2B platform
Domain
Information Security / Compliance / Risk Management
Deliverable
dashboards & analysis
Required skills
ISO 27001, ISMS processes, IT risk management, compliance frameworks (NIST, SOC 2, GDPR), project management, cross-functional coordination
Preferred skills
Technical IT environment knowledge (Cloud, Infrastructure, IAM, Platforms, Software Development), security awareness training coordination, vendor security assessments
Technologies
ISO 27001, NIST, SOC 2, GDPR
Responsibilities
Prepare and conduct ISO 27001 certification and internal/external IT audits; define controls, documentation, and processes for ISMS; create and maintain security policies; conduct risk assessments and business impact analyses; coordinate security initiatives like phishing training and vulnerability tests; evaluate security aspects of third-party vendors and projects; generate risk and compliance status reports and dashboards
