Senior Information Security Specialist

Accountabilities
Own and drive compliance initiatives across multiple security and regulatory frameworks, including ISO 27001, SOC 2, GDPR, TISAX, NIS 2, DORA, ISO 27017/27018, ISO 42001, and C5. Lead end-to-end implementation of ISO 27001 and related security frameworks for customers. Conduct internal audits for strategic customers and review audit work completed by junior specialists to ensure quality and consistency. Mentor and support compliance team members by sharing expertise, improving processes, and strengthening audit delivery standards. Act as a trusted security and compliance advisor for customer success and sales teams, supporting customer discussions and complex security questions. Create and maintain high-quality compliance content, including policies, evidence templates, security awareness materials, and internal enablement resources. Identify compliance gaps, incorporate auditor feedback, and translate improvement opportunities into practical solutions. Collaborate with product and engineering teams to convert compliance requirements into structured product improvements. Build strong relationships with certification partners and support auditors in effectively using compliance tools and processes. Work independently with ownership over priorities, delivery quality, and continuous improvement initiatives. Requirements Fluent English proficiency (C1 or C2 level) is essential. 7+ years of hands-on experience in information security, governance, risk, and compliance (GRC), ideally within B2B SaaS environments. Proven experience leading at least five successful ISO 27001 certification projects as an implementer, auditor, or security consultant. Hands-on experience with GRC platforms or similar security compliance management tools. Strong understanding of cloud security environments, including AWS, Azure, and GCP, with experience in security posture analysis and remediation planning. Excellent project management skills with the ability to manage complex initiatives, prioritize effectively, and deliver results independently. Strong written communication skills with the ability to create clear compliance documentation for technical and non-technical audiences. Senior-level ownership mindset with the ability to operate independently and proactively identify opportunities for improvement. Experience with additional frameworks such as SOC 2, GDPR, NIS 2, or similar standards is a plus. Previous experience mentoring or coaching compliance, audit, or GRC professionals is considered an advantage. Startup or high-growth technology environment experience is a plus. Benefits Fully remote position based in Europe. Competitive salary aligned with local market standards. Equity package providing ownership and participation in company growth. Annual personal development budget of €1,000. Home office budget and access to coworking spaces. Comprehensive health insurance coverage. 26 days of paid holiday plus local public holidays. Latest technology equipment, including laptop and professional accessories. Opportunities to work with experienced security professionals, mentors, and industry experts. Annual company retreat and team events to build collaboration and connections.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether? 
 
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
 
 
#LI-CL1