Governance, Risk and Compliance Engineer

TL;DR

Governance, Risk and Compliance Engineer (Cybersecurity): Developing and optimizing the ISMS framework for an e-procurement platform with an accent on ISO 27001 certification and IT audit preparation. Focus on designing security controls, conducting risk assessments, and collaborating across technical teams to ensure compliance and robust security standards.

Location: Remote across Europe with the option to work from offices in Köthen, Leipzig, or Munich.

Company

hirify.global operates a trusted e-procurement marketplace connecting B2B and public sector organizations to enable sustainable, fair, and efficient sourcing.

What you will do

• Support the preparation and execution of ISO 27001 certification and internal/external IT audits.
• Own and improve defined parts of the ISMS, including policy creation and control implementation.
• Contribute to risk assessments, business impact analyses, and IT emergency recovery planning.
• Coordinate security initiatives such as phishing awareness programs and penetration tests.
• Evaluate third-party and supplier security through structured information security assessments.
• Prepare risk and compliance metrics, reports, and dashboards for stakeholders.

Requirements

• Practical experience in information security, IT risk, or compliance within a corporate environment.
• Fluency in German and English required.
• Experience with ISO 27001, ISMS processes, or audit preparation.
• Solid understanding of technical IT environments including cloud, infrastructure, and identity management.
• Familiarity with frameworks like NIST, SOC 2, or GDPR.
• Demonstrated ability in cross-functional coordination and project management.

Nice to have

• Previous involvement in other industry-recognized security certifications (e.g., Cyber Essentials Plus).

Culture & Benefits

• Flexible work location with options for mobile work or office presence in Germany.
• Agile work environment with flat hierarchies and open communication.
• Commitment to long-term work-life balance and a family-friendly atmosphere.
• Encouraged 10% of working time dedicated to personal development.
• Generous benefits including 30+ days of vacation and health support.