Product Support Specialist (German-speaking)

Secfix

Remote (+/- 2hrs from Germany GMT+1). C1 or C2 German Language is essential At Secfix, we’re at the forefront of automating security compliance in Europe. We help companies get and stay ISO 27001, GDPR, TISAX, and SOC 2 fast and easy and reduce hundreds of hours of manual work. Secfix is run by a 100% remote team with hubs in Munich, Berlin and London. We’re a high-performing team looking for passionate, execution-focused, owners to help us automate security and compliance for modern companies and become the European compliance automation leader. We’ve just raised our $12M Series A and are backed by top VCs, including Alstin Capital, Neosfer (Commerzbank), and Bayern Capital. About the Role We're hiring a Senior Information Security Specialist to strengthen our compliance function as Secfix scales into more frameworks, mid-market customers, and a growing compliance team. This role sits at the intersection of compliance delivery, content, and team support. You'll own the compliance knowledge that lives inside our platform, mentor our junior compliance specialists, support our customer success team, and act as the senior compliance voice for customers, auditors, and product. You'll work closely with our co-founder & CISO and our CS Lead. This is a high-impact role with real influence on how Secfix delivers compliance: both as a service to customers and as content inside our app. What You'll Do: You will own one of the most important pillars of Secfix: the quality and breadth of our compliance offering. We don't (and can't afford to) micro-manage. We've built strong foundations and will give you full context on what works. You can test new approaches, but at the end of the day, you have full ownership of how you deliver results (with a strong support network from within and outside the company). You will: * Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001, C5, and more as we expand) * Implement ISO 27001 and adjacent frameworks end-to-end for customers * Mentor and upskill the compliance team: sharing expertise, reviewing work, and helping drive consistency in audits and customer deliverables * Conduct internal audits directly for strategic and complex customers, and review the internal audits performed by junior team members to drive quality and consistency * Act as a compliance partner to CSMs and sales reps: fast, reliable support for customer questions, and joining customer calls when deep expertise is needed * Own the quality of compliance content in the platform (including creating policies, evidence templates, Compliance enable playbooks for our CSMs, security awareness trainings and more) * Close framework gaps and incorporate auditor feedback into both team practice and platform improvements * Partner with product and engineering to translate compliance gaps into structured product work * Collaborate closely with CS, Product, and Founders to align compliance, customer, and roadmap priorities * Deepen relationships with our existing certification partners and train auditors on the Secfix platform so they can confidently use it during customer audits To be qualified for this role, you must have the following: * German (C1/C2) and English (fluent) is a must for this role * 5+ years of hands‑on information security and GRC experience in B2B SaaS * Led 3+ successful ISO 27001 certification projects as an implementer and/or auditor at a startup or mid-market company * Hands on experience with a GRC platform like Secfix, or similar GRC platforms * Cloud infrastructure readiness across AWS, Azure, and GCP; experience with posture analysis and remediation planning * Strong project management skills with the ability to break down ambiguous initiatives into concrete deliverables, prioritizes ruthlessly, and ships * Excellent written communication, especially in producing clear, precise compliance content for diverse audiences (auditors, founders, engineers) * Strong ownership mindset: operates as a senior individual contributor without waiting for direction Bonus: * Experience implementing one or two additional compliance frameworks (e.g. SOC 2, GDPR, NIS 2, etc.) * Experience mentoring or coaching colleagues in a compliance, audit, or GRC context * Experience in a startup environment is a plus What we offer * Remote Work: 100% remote work with a virtual office in Gather. * Competitive Salary: Industry-competitive local salaries. We pay local rates that are at or above the market. We share this philosophy with GitLab. * Equity: Generous equity package – we’re all owners of Secfix and beneficiaries of our collective success. * Mentorship: We are backed by top VCs and accelerators and have direct access to world-class mentors. * Development Budget: €1,000 annual personal development budget. * Home office Budget: Home office budget and access to co-working spaces. * Holidays: 26 days holiday + local public holidays. * Health Insurance: Comprehensive health coverage. * Annual Retreat: Annual retreat to build connections and inspire ideas (this year we’re headed to Milan!). * Company Events: Company-wide events to build relationships and have some fun! * Tech Equipment: Latest tech equipment (MacBook, monitors, headphones). Interview Process: * 20-30 min - Intro call with Talent team * Take-home Assessment * 1.5hr Assessment review and interview with our CS Lead and CEO * 45 min - Final Founder Interview with Co-Founders (CTO & CISO) Please note: We are an equal-opportunity employer and remote-only company. At this time, we can support hiring only within EU time zones. We work in sync using Gather as our virtual office. As a small fast-growing company, we believe in the need for an in-sync component of daily communication and therefore cannot support 100% asynchronous work. Read more about our Remote Culture here.

Secfix

SENIOR PRODUCT DESIGNER @ SECFIX Location: Remote (EMEA) · CET/CEST timezone Hi — I'm Grigory, co-founder and CTO at Secfix. How do you feel about owning a feature from the first customer conversation to the version that's live on production — writing the spec yourself, pairing closely with engineers through the build, and overseeing your design shipped on production exactly the way you designed it? If that sounds like the right shape of the job — designer who owns, not designer who hands off — read on. I've spent most of my career believing the best designers aren't the ones with the prettiest Figma files. They're the ones who can frame a problem, write a spec, sit with engineers through the build, and own that what shipped is what they designed. Our founding product designer, Ghada, has been doing exactly that since we started. The engineering team has doubled and we're shipping faster than we ever have. We're hiring the second designer because there's more good work to do than one person can hold — and we'd rather ship twice as much than slow down. WHY SECFIX EXISTS Over 1.78 million SMBs in Europe need to comply with security frameworks — ISO 27001, GDPR, TISAX, SOC 2 — just to sell to enterprise customers. The process is manual, painful, and takes over a year. We automated it. Our platform integrates with a company's full tech stack — AWS, Azure AD, Jira, GitLab, GCP, and more — automatically extracts compliance evidence, and guides teams to certification in weeks instead of months. Our fastest customer certified in 4 weeks instead of the industry-standard 12+ months. We've raised €17M in total (€12M Series A), backed by Alstin Capital, Neosfer (Commerzbank), and Bayern Capital. We're on a profitable trajectory, growing fast, and building the team that will take us to European market leadership. This space is not threatened by AI, it's amplified by it. Compliance requires deep domain expertise combined with automation. Our new AI product (CISO AI) is just getting started, and there's a huge amount of product design work ahead: agentic workflows, intelligent evidence collection, context-aware policy generation, and more. WHAT WE BELIEVE Compliance software has historically been built like the audit it automates — heavy, defensive, ugly. We're building something else. The customer is a real person trying to ship audit-ready evidence on a Friday afternoon. The product should respect their time, automate the boring parts, and make the rest feel calm. Quality is the product. Most of our category competes on feature lists. We compete on craft. A clear empty state, a sync that doesn't lie, a settings page that holds together at eleven permission tiers — these are the things customers feel before they can name them. Design at Secfix is not what wraps the product. It's most of what makes it work. WHAT THE ROLE IS We expect strong design skill, strong product thinking, and the ability to hold your own in a technical discussion. You work in a small team — usually with one or two engineers — and pair closely from the first prototype through to production. You own the project from beginning to end. Alongside the features you ship, you do three things that make everyone else faster: * Maintain the components and patterns that make design fast. * Own how the team ships. We have no PMs. You write the specs, run the ticketing workflow, keep engineers unblocked. * Build the tools and skills — Cursor rules, design QA skills, prompt templates — that let engineers do good design work without you in the room. The leverage is doing all four well. Doing only one is the wrong shape. HOW WE WORK * No PMs. Designers and engineers run product. You talk to customers, frame the problem, write the spec, decide what ships. * Small temporary teams. You plus one or two engineers per project. Whoever is closest to the problem leads. * Design leads the logic, engineering tests feasibility. You bring the V1. Engineers push back on what's expensive or risky, start ahead with system design. They help spot edge cases. You adjust it fast. We get from v1 to v4 in matter of hours or few days. * Prototype-grade, not wireframes. Real components, real states, real copy. Sometimes an LLM-built prototype before Figma. The component library stays current because the speed of design depends on it. * Handoff is the beginning, not the end. You're in the engineering channel. You review the PR. You verify on production. Staging QA is the first gate, not the last. * In-sync culture with thoughtful coms mindset. Loom for reviews, Notion for specs, quick loops in Gather where written coms doesn’t cut it, all happening in the same time zone. Team mates are reviewing things quick. Engineers and designers spend under two hours weekly meetings. * AI is part of the craft. We use Claude to pressure-test ideas, draft specs, surface edge cases, write test cases. Not to skip thinking. THE FIRST THREE MONTHS * Month 1. Ship your first design to production. Get into the codebase, the customer language, the way we write specs. Sit on customer calls. * Month 2. Own a full feature end-to-end. Customer conversations, problem framing, Figma, spec, engineer pairing, PR review, production verification. * Month 3 and beyond. Push the design system forward. Start building the tools and skills that make engineers faster at design. Improve the product design process. The bar is yours to defend. WHO YOU ARE * 8+ years designing B2B SaaS desktop applications as Staff/Principal Product Designer or similar. Dense interfaces — tables, filters, permissions, settings pages. * You've been the only designer, or one of two or three, in companies under 50 people at least once before. You know how to set the bar without a design org behind you. * Your portfolio is "I," not "we." You can name the engineer you paired with on each feature, the design decision you defended through the build, and what happened when the feature reached users. * You communicate clearly and concise in English: in Slack, in docs and on a call. * You're fast in Figma with or without AI. You’re already in a serious relationship with LLMs. * You treat engineering feasibility as input, not constraint. When an engineer says "three weeks, here's why," you find the version that's 80% as good and ships next week. * You're comfortable doing product work without the PM title. * You hear feedback and come back the next day with something better. You don't spend the hour in between defending the version that's already outdated. COMPENSATION Salary + equity based on experience. The offered compensation depends on the individual's qualifications assessed during the interview process. WHAT WE OFFER * Generous equity. Everyone is an owner. * 26 days holiday + local public holidays. * Comprehensive health insurance. * €1,000 annual personal development budget. * Remote workspace and co-working budget. * Latest equipment. * Team summits 1-2x per year. Recent ones: Costa Brava, Austrian Alps, Milan. * Local hubs in Munich, Berlin, London. Visa support if you want to relocate. INTERVIEW PROCESS We aim to invite you to a first conversation within a week and give feedback after every stage. * Intro call with talent team * Portfolio conversation with product designer (~45 min) * Take home design exercise and presentation (~3 hours) * Virtual team onsite (~2 hours) Order may flex depending on availability. If you make it to the exercise and don't get an offer, we'll tell you specifically what got in the way. LEARN HOW WE THINK AND WORK * How we designed remote culture at Secfix * Thoughtful communication at Secfix * Building production-grade product with AI in 2026 * Building what customers need, not what they ask for * Our zero-bug policy * Crafting quality that endures — Karri Saarinen's Config talk We are an equal-opportunity employer and a remote-only company. We hire within EU time zones. We work in sync using Gather as our virtual office and don't support fully asynchronous work.

Secfix

This post isn't linked to a specific job. If you don't see a posting applicable to your skillset, then we encourage you to send us a speculative application via this form. We have ambitious plans to become the market leader and, as we scale, we'll be looking to add more exceptional talent to our team from all different functions. From Engineering to Customer Success, to Sales and Marketing and many more, by joining our future talent pool you’ll be among the first candidates we review for each new role we publish. Whether you're an experienced professional or just starting your career journey, we'd love to hear from you! By completing this form, please note you are not applying to a current open role at Secfix. You are submitting your interest for a future role. If there is a live role of interest to you we would urge you to apply to that position directly, otherwise your application may be missed. About Secfix Secfix automates security compliance for SMBs in Europe. We help SMBs automate ISO 27001, GDPR, TISAX, and SOC 2 fast and easy. Our platform integrates with a company’s tech stack (like AWS, Azure AD, Jira, etc.), automatically extracts the data needed for compliance, and creates a checklist to become and remain compliant.  About Our Team We’re a fun, close-knit team on a mission to automate security and compliance for modern companies and become the European compliance automation leader. Our trajectory is fueled by top investors, including Octopus Ventures, Neosfer (Commerzbank), founders of Signavio and many more angels. We are a team of 18 (and growing!) with founders passionate about Y Combinator product principles and building a great remote culture. We are solving a real need with a huge $97bn market and the future is very bright. We are very proud of our Secfix values - and look for candidates who share them. They are: * We are obsessed with our customers. We start with the customer and work our way backward to create amazing products they love. * We build everything in a smart way. We love working by YCombinator's principles and preach those to our team. * We create trust within our organisation. Transparency and ethics are within our DNA. * We are hacky. A functional prototype delivered within 2 weeks is worth more than a perfect solution delivered in 2 months. * We take ownership. Building a startup is about ownership and being accountable for timely delivery. * We are leaders of remote work. We are passionately building a culture where people can be productive working from anywhere. What We Offer * Remote Work: 100% remote work with a virtual office in Gather. * Competitive Salary: Industry-competitive local salaries.We pay local rates that are at or above the market. We share this philosophy with GitLab. * Equity: Generous equity package – we’re all owners of Secfix and beneficiaries of our collective success. * Holidays: 26 days holiday + local public holidays. * Health Insurance: Comprehensive health coverage. * Development Budget: €1,000 annual personal development budget. * Workspace Budget: Remote workspace budget and access to co-working spaces. * Annual Retreat: Annual retreat to build connections and inspire ideas (this year we’re headed to Milan!). * Tech Equipment: Latest tech equipment (MacBook, monitors, headphones). * Company Events: Company-wide events to build relationships and have some fun! * Mentorship: We are backed by top VCs and accelerators and have direct access to world-class mentors. Please note: We are an equal-opportunity employer and remote-only company. At this time, we can support hiring only within EU time zones. We work in sync using Gather as our virtual office. As a small fast-growing company, we believe in the need for an in-sync component of daily communication and therefore cannot support any 100% asynchronous work.