GRC Specialist

About This Opportunity

We are representing a fast-growing European compliance automation company that helps organizations achieve and maintain security certifications. Our client is expanding their compliance operations and needs a seasoned GRC Specialist to strengthen their delivery capability across multiple frameworks and markets.

This is a remote role open to candidates based in the UK, Germany, Austria, Poland, or Serbia. You'll work closely with senior leadership and play a central role in shaping how compliance is delivered—both as a service and as embedded content within the platform.

Responsibilities

You will own the quality and breadth of the compliance offering. Your work will directly impact how customers experience compliance:

• Build and maintain compliance frameworks within the platform (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, and others)
• Own internal audits for customers end-to-end, from kickoff through final reporting
• Manage multiple concurrent audits while keeping all on schedule
• Implement ISO 27001 and adjacent frameworks for mid-market clients
• Create and maintain compliance content including policies, automated checks, evidence templates, and training materials
• Close framework gaps based on auditor feedback and improve both team practices and platform features
• Partner with product and engineering teams to translate compliance requirements into structured development work
• Collaborate with customer success, product, and leadership to align compliance priorities with customer needs and product roadmap
• Build and strengthen relationships with certification partners and train external auditors on platform usage

What We're Looking For

Required qualifications:

• Fluent English (written and spoken)
• 3+ years of hands-on information security and GRC experience
• Led at least one successful ISO 27001 certification project as an implementer and/or auditor at a startup or mid-market company
• Conducted at least two internal audits previously
• Hands-on experience with a GRC platform in a professional capacity
• Real depth in at least one framework beyond ISO 27001 (TISAX, SOC 2, GDPR, NIS2, or similar)
• Strong project management skills with ability to break down ambiguous initiatives, prioritize ruthlessly, and ship results
• Excellent written communication, especially producing clear compliance content for auditors, founders, and technical teams
• Strong ownership mindset and ability to operate independently without micromanagement
• Bachelor's degree in computer science, software engineering, or related technical field (or equivalent hands-on technical experience)

Bonus qualifications:

• Experience mentoring or coaching colleagues in compliance, audit, or GRC contexts
• Previous startup experience
• PECB ISO 27001 Lead Auditor certification or direct equivalent

How We Work With You

When you apply through Get A Job.ai, our talent team will screen your profile and arrange initial conversations. We manage the entire candidate experience and present qualified professionals to our client. If there's mutual interest, you'll participate in the client's interview process, which includes a take-home assessment, technical review sessions with leadership, and final founder interviews.

Please do not attempt to contact the client directly. All communication and coordination will go through our recruiting team to ensure a smooth, professional process.

Pay

Compensation details will be discussed during the screening process and are based on location and experience level within the EMEA region. Our client offers competitive local market rates, equity participation, a €1,000 annual development budget, home office support, 26 days holiday plus local public holidays, comprehensive health coverage, and additional benefits.

Equal Opportunity

Get A Job.ai is committed to fair and equitable recruiting practices. We evaluate all candidates based on qualifications and merit, and we support our clients in building diverse, inclusive teams.