Information Security Lead
Core
Lead the compliance function, own the compliance roadmap, manage compliance specialists, and act as the senior compliance voice for customers and auditors.
Role type
Senior Information Security Lead (GRC)
Builds
Compliance automation platform and services for ISO 27001, GDPR, TISAX, SOC 2, and other frameworks
Domain
Information Security / GRC / Compliance Automation
Required skills
Information security and GRC experience, ISO 27001 implementation and auditing, GRC platform expertise, cloud infrastructure readiness (AWS, Azure, GCP), project management, compliance content creation, stakeholder partnership
Preferred skills
Additional compliance frameworks (SOC 2, GDPR, NIS 2), startup environment experience
Technologies
AWS, Azure, GCP, GRC platforms
Responsibilities
Own and drive the compliance roadmap across frameworks; Implement ISO 27001 and adjacent frameworks end-to-end for customers; Hire, manage, and upskill the compliance team; Conduct internal audits for strategic customers; Act as a compliance partner to CSMs and sales reps; Own the quality of compliance content in the platform; Partner with product and engineering to translate compliance gaps into product work; Run the day-to-day of Secfix's own compliance program
Seniority
Senior, hands-on IC
