Remote Dev Jobs
21 jobs available
HonorVet Technologies · 🇺🇸 United StatesRemote1mo ago
HonorVet Technologies is a veteran-owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn''t a tagline — it''s the way we work. We don''t forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there''s a fit worth exploring. Must have Experience with Texas Department …
DexComRemote1mo ago
Headquarters: San Diego URL: http://dexcom.com The Company Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health. We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us. *This is NOT a test role* The Senior Software Design Assurance (Sr Software Design Quality) Engineer provides technical support and guidance to Software teams to ensure conformance to software development process and other applicable safety and quality system regulation and standards (e.g. IEC 62304, ISO 13485, ISO 14971). This role will be responsible for various aspects of Software Design Assurance with a focus on product improvement, new product development, and defect prevention. This position will interface with different cross functional groups (Software Engineering, Software Test, Regulatory Affairs, Marketing, Project managers, Systems Engin
Eraneos · 🇩🇪 Hamburg, GermanyRemote57y ago
What you can expect from us We are the cybersecurity experts of the globally operating Eraneos group based in Germany. We primarily advise DAX and Fortune 500 companies on cybersecurity topics such as OT security, risk assessment or compliance. We offer prospective employees an international work environment with a highly agile team and creative start-up methods and an attractive payment package. As Principal Cybersecurity (all genders), you will take entrepreneurial responsibility for the growth and development of our Cybersecurity business: Develop and execute a growth strategy for Cybersecurity consulting and services Identify and acquire new key accounts while expanding existing client relationships Position our Cybersecurity offerings in the market and help shape our portfolio (e.g., Security Strategy, Governance, Risk & Compliance, Cloud Security, SOC & MDR, OT/IoT Security) Lead complex proposal processes (RFI/RFP), including proposal development, pricing strategy, and contract negotiations at C-level Collaborate closely with the Cybersecurity Leadership Team and other consulting practices to develop integrated service offerings Build and maintain strategic partnerships with technology vendors, resellers, and ecosystem partners Represent the company at industry events, conferences, and relevant committees You act as a trusted advisor to our clients, combining strategic consulting expertise with a strong commercial mindset. Who you are You hold an outstanding university degree, ideally in the STEM field You have extensive experience (10+ years) in Cybersecurity, ideally in consulting or a comparable role with a strong business development focus You have a proven track record in building and growing client accounts, as well as selling complex Cybersecurity services and solutions You possess strong knowledge of the Cybersecurity market, including threat landscapes, regulations, technologies, and vendor ecosystems, as well as the needs of large enterprises and mi
Localstack · 🇬🇧 United KingdomRemote57y ago
LocalStack - the Local Cloud Sandbox for Developers and AI Agents We are a fast-growing Series A startup building cutting-edge technology to revolutionize cloud development processes and support highly efficient dev&test feedback loops. We’ve closed our last $25mil round in Q4 2024, led by Notable Capital , CRV and Heavybit . LocalStack is a local cloud development platform. LocalStack makes it easier, faster, and less expensive for software teams to ship reliable, high-quality applications to the cloud. The cloud was built to run software, not to support AI-native development workflows. As the world's leading local cloud development platform, LocalStack provides secure local sandboxes that simulate cloud environments, enabling AI agents and software developers to find and fix risks faster and more effectively than they can in the cloud. Our customer base ranges from SMBs to Global Fortune 500 companies. Our clients include companies like NASA, Harness, IBM, Workday, Comcast, Apple, 3M, Block and many more. We are sustainably growing our globally distributed teams across GTM, operations and engineering. In 2025 we almost doubled in size and continue to grow across all areas in 2026. LocalStack is headquartered in Zurich/Switzerland 🇨🇭, with a small engineering office in Vienna/Austria 🇦🇹 and remote team members from 25 countries including 🇺🇸the US, 🇫🇷FR, 🇬🇧UK, 🇨🇦CA, 🇪🇸ES, and many more! 👉Check our Notion Candidate Handbook and our GitHub ! ✅ What you will be working on/responsible for Own the internal cloud infrastructure and serve as the primary point of contact for cloud operations and infrastructure requests. Manage and continuously improve our multi-account cloud environment, ensuring security, governance, and compliance best practices are consistently applied. Support and maintain compliance with SOC 2 Type II and ISO 27001 , ensuring audit evidence is prepared continuously rather than only during audit periods. Operate and improve our identity a
Constructor · Remote - EMEARemote57y ago
About You As Director of Information Security, you will own Constructor's security program end-to-end — protecting our platform, our customers' data, and our team. You'll report to the CIO and serve as the company's senior security leader, responsible for everything from compliance frameworks and incident response to hands-on prospect engagements and internal policy. This is a high-autonomy role where you'll shape strategy and execute it yourself in a lean, engineering-driven organization. About Us Constructor is the only search and product discovery platform tailor-made for enterprise ecommerce where conversions matter. Constructor's AI-first solutions make it easier for shoppers to discover products they want to buy and for ecommerce teams to deliver highly personalized experiences that drive impressive results. Optimizing specifically for ecommerce metrics like revenue, conversion rate and profit, Constructor generates consistent $10M+ lifts for some of the biggest brands in ecommerce, such as Sephora, Petco, home24, Maxeda Brands, Birkenstock and The Very Group. Constructor is a U.S. based company that was founded in 2015 by Eli Finkelshteyn and Dan McCormick. About the Position The Director of Information Security’s responsibilities will include: Customer trust & sales enablement — Answer prospect security questions, review and finalize security questionnaires, and meet directly with prospects and customers to represent Constructor's security posture Compliance & audit — Own SOC 2 Type II and ISO 27001 certification programs, manage external auditors, maintain controls, and ensure continuous compliance Incident response — Own all security incidents from detection through resolution and post-mortem; maintain and improve the incident response plan Risk management — Conduct ongoing risk assessments, maintain the risk register, and present risk posture to leadership and the board Access governance — Run quarterly access reviews across all systems; ensure least-priv
Trusteq Gmbh · 🇩🇪 Munich, GermanyRemote57y ago
YOUR TASKS You analyze existing governance models and identify optimization potential in the context of AI. Additionally at Senior Level: You lead complex governance projects, assume strategic responsibility for the implementation of modern AI governance frameworks, and advise organizations on governance, risk, and compliance topics at the enterprise level. You design and implement policies, procedures, and frameworks to ensure robust AI governance. Additionally at Senior Level: You develop tailored governance strategies and solutions aligned with international compliance and ethical standards and advise on establishing new processes, committees, and clear accountability structures. You support clients nationally and internationally in establishing compliance and ethical standards. Additionally at Senior Level: You advise executives and decision-makers on regulatory risks and support organizations in preparing for the EU AI Act, including integrating its requirements into existing processes, structures, and control systems. You coordinate the implementation of governance processes within AI projects. Additionally at Senior Level: You oversee the implementation of governance processes, initiate continuous improvements, and collaborate closely with internal teams and clients, particularly in regulated industries. You assess regulatory requirements and derive measures to ensure compliance with applicable legal frameworks. Additionally at Senior Level: You support the implementation and further development of ISO management systems and conduct or professionally accompany information security audits. You mentor and coach junior consultants and foster knowledge transfer within the team. You document processes and prepare reports to continuously improve governance structures. Additionally at Senior Level: You document project progress, present results in workshops, lead strategic discussions with stakeholders, and prepare well-founded decision materials. YOUR PROFIL You ha
Pencil · 🇬🇧 United KingdomRemote57y ago
Job Description At Pencil, we are driving innovation in advertising technology through our state-of-the-art SaaS product, which harnesses Generative AI to redefine content creation. Our mission is to make AI the default in advertising without replacing creative people. To achieve this, we need to make sure that our technology isn’t just in the hands of big brands - we need to try to help small businesses and creative individuals too. We're looking for a Security & Trust Specialist to join Pencil at a pivotal moment of growth. This is a hands-on, technical role for someone with a background in desktop support, IT systems administration or a similar technical operations role who is now building a career in security. You'll own the day-to-day security operations that keep Pencil safe — endpoints, identity and access, cloud and SaaS security — and you're happy to lend a hand with practical IT and device issues where needed. You'll work directly with our Head of Security & Trust, who will support your growth into the audit, compliance and vendor-risk side of the role over time. Key responsibilities: Administer and secure endpoints (MDM/Intune, patching, encryption, device compliance), and be willing to pitch in on practical desktop support and device issues when the team needs a hand. Own day-to-day identity and access management — joiner/mover/leaver processes, least-privilege access and quarterly access reviews across Google Workspace, Microsoft 365, GCP and other SaaS tools. Monitor security alerts and logs, escalate promptly, and help investigate and document security events (suspicious logins, compromised credentials, device loss, cloud misconfiguration). Support compliance evidence collection in Vanta for SOC 2, ISO 27001 and ISO 42001, working alongside the Head of Security & Trust rather than owning audit strategy yourself. Help gather evidence for vendor and customer security questionnaires, and flag anything that needs escalating. Identify and implement practic
European Dynamics · 🇩🇪 GermanyRemote57y ago
Are you a highly motivated System Architect fluent in German? EUROPEAN DYNAMICS is seeking a skilled System Architect to join our dynamic team driving complex enterprise projects. What You'll Do: Responsibility for architecture decisions within the scope of the established and agreed overall and system architecture for all services, in particular also taking into account the non-functional requirements such as performance, security and stability; Advising the specialist department of the ITZBund as well as the design team on the detailing of technical requirements with regard to technical effort and complexity drivers; Design of the system architecture in compliance with the security standards and certifications (e.g. ISO 27001, BSI-Grundschutz); Continuous improvement of the development architecture and processes; Preparation and presentation of information and decision-making documents; Organisation and assurance of the knowledge transfer to employees; Requirements Expert knowledge in the role of architect in enterprise – projects; Expert knowledge of microservice architectures; In-depth knowledge of relational databases; Expert knowledge of cloud technologies such as Kubernetes and OpenShift, or equivalent cloud technologies; Expert knowledge in the field of container virtualisation such as Docker or equivalent technologies; Expert knowledge of complex projects with many individual components and their configuration; Expert knowledge in the field of IT security and data protection; In-depth knowledge of working with version control systems such as Git; Expert knowledge of distributed infrastructure components (incl. geo-redundancy); At least 5 years of demonstrable practical experience; Based in Germany; Fluent command of oral and written German (level C2 required) and English at a sufficient level; Benefits We believe in rewarding talent and dedication. Here's what you can expect as part of our team: Competitive full-time salary; Private Health Coverage on the C
intcube GmbH · 🇩🇪 Berlin, GermanyRemote57y ago
Wir sind anders – und wir suchen weitere Menschen, die auch anders sind. Uns treibt die Mission, die europäischen Werte zu verteidigen, indem wir den Mittelstand schützen und stärken. Uns eint die Vision, dass wir Impact erzeugen wollen, indem wir möglichst viele Organisationen befähigen, effektiv Widerstandsfähigkeit zu entwickeln. Wir beteiligen alle Mitarbeitenden am gemeinsamen Erfolg. Unser Anders-Sein findet sich auch in unseren Prioritäten wieder: Economic Survival (Miete und Gehälter müssen bezahlt werden) Joy of working together (Die Freude an der gemeinsamen Arbeit hält uns langfristig zusammen) Doing good (Wir haben die Firma gegründet, um möglichst viel Gutes zu tun, denn “don’t be evil” ist einfach zu wenig) Profit (Wir freuen uns über Profit – und wir ordnen diesem nicht alles unter) Aufgaben Leitung und Durchführung von IT-Sicherheitsprojekten von der Planung bis zum Abschluss, Gewährleistung der Kundenzufriedenheit und des Projekterfolgs Entwicklung von Sicherheitsarchitekturen und Analyse der technischen Anforderungen für Kundenprojekte Du fungierst als Hauptansprechpartner*in für Kunden, baust enge Beziehungen auf und ermittelst Möglichkeiten für eine weitere Zusammenarbeit Durchführung von Workshops und Schulungen zu bewährten Sicherheitsverfahren und -technologien Du hältst dich über die neuesten Sicherheitstrends und gesetzlichen Anforderungen auf dem Laufenden, um fundierte Empfehlungen aussprechen zu können Qualifikation Zögere nicht, wenn du nicht alle Anforderungen erfüllst oder unsicher bist, ob der Job das Richtige ist für dich. Es kommt auf deine Persönlichkeit und deine Motivation an! Dein Profil Nachgewiesene Erfahrung im Management von Kundenprojekten und in der eigenständigen Bereitstellung von Sicherheitslösungen Ausgeprägtes Verständnis für Cybersicherheit Bachelor- oder Master-Abschluss in Informatik, Wirtschaftsinformatik, Cybersicherheit oder gleichwertige Berufserfahrung Kenntnisse relevanter Regelwerke (wie NIS2, DORA, ISO 2700
Linro · 🇩🇪 GermanyRemote57y ago
About Linro Linro is a cloud security company building a real-time, agentic cloud-security platform. Teams ship with AI. AI ships with Linro. Cloud infrastructure changes constantly, and increasingly it's AI agents making those changes, not people. Most security tools only catch problems after the fact. Linro works differently. We enforce what's allowed at every stage, from commit to production. We stop bad changes before they ship, and fix problems in real time once they're live. We have each been on the receiving end of this problem: running cloud security at scale, building the platforms underneath it, and shipping in regulated systems where a wrong change isn't an option. Founded in Berlin in 2026 and built fully remote across Europe, Linro has a platform that's real and working, with plenty still to shape. The role You will own Linro's security and compliance program end to end, starting from a blank page. Your job is to build that from scratch: figure out where we actually stand, find the gaps, and close them across a multi-cloud environment. Automate what can be automated instead of redoing the same work by hand every quarter. What you will do Take SOC2, ISO 27001 and 42001 from a blank page to audit-ready . Run the gap analysis, document controls and policies, gather and map evidence, track remediation to done, and get us through audit. Automate compliance instead of just babysitting it: build checks and guardrails so we stay continuously compliant, and help ensure our multi-cloud infrastructure (AWS and beyond) is managed as Infrastructure-as-Code with Terraform. Own our compliance evidence end to end: keep it current, mapped, and audit-ready across whatever tooling we run. Support security operations : monitoring, alert triage, and documenting findings. Stay close to how the product is actually built . Our compliance checks run on the same engine we sell customers, so you are testing the product, not filling out paperwork off to the side. What we are looki
secupay AG · PulsnitzRemote57y ago
Festanstellung | Vollzeit | Hybrid / Remote mit gelegentlichen Treffen in Pulsnitz Als Informationssicherheitsbeauftragter übernehmen Sie eine zentrale Rolle bei der Weiterentwicklung unseres Informationssicherheitsmanagements und sorgen dafür, dass Sicherheitsanforderungen wirksam, prüfungsfähig und nachvollziehbar umgesetzt werden. Aufgaben Sie steuern und entwickeln das Informationssicherheitsmanagementsystem der secupay AG inklusive Richtlinien, Standards, Verfahren, Rollen und Kontrollrahmen weiter Sie beraten Vorstand, Führungskräfte, Fachbereiche, IT und Security Office/SOC zu Informationssicherheit und sicheren Systemen, Anwendungen, Prozessen und Dienstleistern Sie leiten Sicherheitsanforderungen aus DORA, ZAG-MaRisk, BaFin- und EBA-Vorgaben, DSGVO, ISO/IEC 27001, TISAX und PCI DSS ab und überwachen deren Umsetzung Sie begleiten Audits, Assessments, Managementbewertungen, Zertifizierungen und Prüfungen inklusive prüfungsfähiger Nachweise Sie bewerten Sicherheitsvorfälle, Schwachstellen, Bedrohungen und Testergebnisse und unterstützen Notfallmanagement, Wiederanlauf und digitale operationale Resilienz Sie konzipieren Awareness- und Schulungsmaßnahmen und arbeiten eng mit IKT-Risikomanagement, IT-Compliance, Datenschutz, Auslagerungsmanagement, Revision und weiteren Kontrollfunktionen zusammen Qualifikation Als leidenschaftlicher Sicherheitsexperte kennen Sie die Regelwerke aus dem Effeff und können sie in die Praxis übersetzen. Sie arbeiten selbstständig und eigenverantwortlich, können aber auch andere für gemeinsame Ziele gewinnen und begeistern. Sie bringen mehrjährige relevante Berufserfahrung im Bereich Informationssicherheit mit Sie verfügen über sehr gute Kenntnisse im Informationssicherheitsmanagement sowie in ISO/IEC 27001 und PCI DSS Sie kennen relevante regulatorische Anforderungen, insbesondere DORA, ZAG-MaRisk, DSGVO, BaFin- und EBA-Vorgaben Sie bringen Erfahrung in Audit-, Zertifizierungs-, Assessment- und Nachweisprozessen mit Sie verfügen über
Street Group · 🇬🇧 Manchester, United KingdomRemote57y ago
Security & Resilience Lead 📍 Manchester (Hybrid, up to 4 days WFH) 💰 £50k-£70k (negotiable) Street Group is one of the fastest-growing PropTech companies in the UK. We want to be the leading creator of delightful experiences for everybody involved in buying, selling, renting and letting property, regardless of their involvement, to improve the industry for everybody by elevating UK Estate Agencies through world-class technology. This role exists because we're growing fast, working towards ISO certification, and taking on bigger, more regulated customers. All of which means the security practices we handle today need to be documented and independently owned. We're now looking for a Security & Resilience Lead - who'll ensure Street Group's security function operates effectively and continually improves. You'll work with the Head Of Security to decide what tools, processes and controls should be used, and lead with the ongoing configuration and maintenance of those tools to shape how security is embedded across the business - from development through to customer onboarding and off boarding. There's no team to inherit and no existing playbook to follow: just the opportunity to build one. Here's what you can expect to be working on as our Security & Resilience Lead Working with technical teams review the security impact of technology changes and ensure security controls are met before production releases. Make sure environments are configured securely, verify controls and oversee technical change so access and data are handled appropriately. Monitor threat intelligence for company exposure, review emerging threats, and share relevant intelligence with stakeholders. Lead the response to security incidents, coordinating investigations and root cause analysis, and producing clear and accurate reports for internal and external stakeholders. Own our security monitoring capability, ensuring effective logging across key platforms and improving detection while preventing alert
Heidi · 🇬🇧 London, United KingdomRemote57y ago
We’re Heidi. We're building the future of healthcare by giving every clinician the earth's finest AI Care Partner. In just 18 months, our clinical AI products have absorbed the administrative chaos of 73 million patient visits. Today, we support over 2.5 million patient sessions a week across 190+ countries. Healthcare systems are failing us; clinicians spend more time on documentation than on patients, and the human connection that makes medicine worth practicing is eroding. Our mission is simple: double the world’s healthcare capacity and strengthen the human connection at its heart. We found product-market fit with a freemium medical scribe that clinicians love. Now, we're expanding. Every task a clinician hands to Heidi is a patient who feels more attended to, a health system unclogged, and a clinician who gets to be a clinician again. If you don’t choose easy and you want to build something way bigger than yourself then, choose the challenge, choose Heidi. The Role What you’ll do As our Design Quality & Compliance Engineer , you’ll sit at the heart of Heidi’s mission to make world-class care faster and safer through intelligent, compliant technology. Reporting into the Legal & Regulatory Affairs team, but working day-to-day within Engineering, you’ll be the key link ensuring our agile software development practices remain fully aligned with global medical device and information security standards. Your core mission is to help ensure that our software design and development activities meet global medical device requirements, leading the practical implementation of IEC 62304 (software lifecycle), ISO 14971 (risk management), and ISO 13485 (quality management systems) within an agile, iterative environment. You’ll help shape how design inputs, verification, validation, and risk controls are captured, reviewed, and evidenced. This is a hybrid role for someone who can masterfully implement compliance within a modern, agile software culture, enabling engineering team
Secfix · Remote-EuropeRemote57y ago
Remote (+/- 2hrs from Germany GMT+1). C1 or C2 English is essential At Secfix, we’re at the forefront of automating security compliance in Europe. We help companies get and stay ISO 27001, GDPR, TISAX, and SOC 2 fast and easy and reduce hundreds of hours of manual work. Secfix is run by a 100% remote team with hubs in Munich, Berlin and London. We’re a high-performing team looking for passionate, execution-focused, owners to help us automate security and compliance for modern companies and become the European compliance automation leader. We’ve just raised our $12M Series A and are backed by top VCs, including Alstin Capital, Neosfer (Commerzbank), and Bayern Capital. About the Role We're hiring a Senior Information Security Specialist to strengthen our compliance function as Secfix scales into more frameworks, mid-market customers, and a growing compliance team. This role sits at the intersection of compliance delivery, content, and team support. You'll own the compliance knowledge that lives inside our platform, mentor our junior compliance specialists, support our customer success team, and act as the senior compliance voice for customers, auditors, and product. You'll work closely with our co-founder & CISO and our CS Lead. This is a high-impact role with real influence on how Secfix delivers compliance: both as a service to customers and as content inside our app. What You'll Do: You will own one of the most important pillars of Secfix: the quality and breadth of our compliance offering . We don't (and can't afford to) micro-manage. We've built strong foundations and will give you full context on what works. You can test new approaches, but at the end of the day, you have full ownership of how you deliver results (with a strong support network from within and outside the company). You will: Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 4200
Ant-Tech · 🇬🇧 London, United KingdomRemote57y ago
Tasks Description Join a stellar team of leaders and experts in fintech, blockchain, cryptography, infrastructure, and security to build the next generation of core banking systems. We're hiring an IT Manager to lead the internal systems and infrastructure for our remote-first, global team. You will be responsible for ensuring our team has the secure, efficient tools, hardware, and support required to operate, while managing our IT stack, overseeing procurement, and maintaining our high security and compliance standards. This role blends strategic leadership with hands-on execution, requiring technical proficiency, security expertise, and the resilience to grow in a fast-paced environment. You'll report to the CISO and work closely with Engineering, Security, and Operations to support our growth internationally. Responsibilities Manage and optimize our Google Workspace environment. Oversee procurement, configuration, and shipping of company material to all employees. Lead the IT portion of the employee lifecycle, ensuring seamless access management and equipment logistics. Manage software and hardware vendors, optimizing for performance and cost. Support our SOC 1, SOC 2 Type II, ISO 27001, ISO 22301 and CCSS initiatives by maintaining records of IT procedures and ensuring compliance across all systems. Provide technical assistance to team members, resolving technical issues promptly. Manage and scale our MDM solutions to ensure fleet-wide security and automation. Develop and maintain playbooks, runbooks, and scalable IT processes as we grow. Support to team in the use of IA tools and MCP connectors Requirements Requirements 6+ years of experience in IT Management or a similar internal systems role. Expertise in Google Admin and Google Workspace security tools. Experience managing IT for a remote-first workforce across multiple time zones. Strong understanding of MDM solutions (e.g., Jamf) and endpoint security. Knowledge of cybersecurity best practices and experien
Secfix · Remote-EuropeRemote57y ago
Remote (+/- 2hrs from Germany GMT+1). C1 or C2 English is essential At Secfix, we’re at the forefront of automating security compliance in Europe. We help companies get and stay ISO 27001, GDPR, TISAX, and SOC 2 fast and easy and reduce hundreds of hours of manual work. Secfix is run by a 100% remote team with hubs in Munich, Berlin and London. We’re a high-performing team looking for passionate, execution-focused, owners to help us automate security and compliance for modern companies and become the European compliance automation leader. We’ve just raised our $12M Series A and are backed by top VCs, including Alstin Capital, Neosfer (Commerzbank), and Bayern Capital. About the Role We're hiring a Senior Information Security Specialist to strengthen our compliance function as Secfix scales into more frameworks, mid-market customers, and a growing compliance team. This role sits at the intersection of compliance delivery, content, and team support. You'll own the compliance knowledge that lives inside our platform, mentor our junior compliance specialists, support our customer success team, and act as the senior compliance voice for customers, auditors, and product. You'll work closely with our co-founder & CISO and our CS Lead. This is a high-impact role with real influence on how Secfix delivers compliance: both as a service to customers and as content inside our app. What You'll Do: You will own one of the most important pillars of Secfix: the quality and breadth of our compliance offering . We don't (and can't afford to) micro-manage. We've built strong foundations and will give you full context on what works. You can test new approaches, but at the end of the day, you have full ownership of how you deliver results (with a strong support network from within and outside the company). You will: Own and drive the compliance roadmap inside the Secfix platform across different compliance frameworks (ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 4200
Transficc · 🇬🇧 London, United KingdomRemote57y ago
Location: Remote First; office location Moorgate, London (flexible remote working locations within UK/Europe) Employment type: Permanent (open to contract as well) Working Hours: Full-time (UK 9-6) Salary: dependent on experience up to £75,000 + Shares + Benefits We are hiring to enhance our Security and Compliance efforts. In this role, you will work closely with Security Compliance, Senior Leadership, and Site Reliability Engineering to support our GRC initiatives. We provide a low-latency, high-throughput distributed messaging system to the e-trading Fixed-income markets. We are, foremost, a technology service provider and support for part of our customers’ trading infrastructure. You will help maintain positive customer relationships by handling compliance questions and ensuring our security practices are effective and up to date. Here’s what you’ll be doing: Stakeholder Communication and Reporting: respond to customer security questionnaires and produce management reports on security compliance and metrics for relevant committees. Contribute to and Improve Compliance Programmes: contribute to internal control evaluations and testing to ensure adherence. Ensure compliance with industry standards such as GDPR, DORA, NIS2, ISO 27001, and SOC 2. Coordinate responses to internal and external audits, and support security assessments, including third-party penetration tests. Risk Management and Issue Resolution: contribute to the maintenance of the risk assessment process to identify, evaluate, and mitigate potential risks. Triage security issues and provide recommended solutions. To be successful in this role, we require: 4+ years of experience in security compliance, GRC, or infosec roles Experience answering complex compliance questionnaires, ideally from Banks or highly regulated organisations Experience in developing and implementing information security policies, standards and procedures Experience leading ISO27001 and SOC 2 certification processes Familiarity w
Intelance · 🇬🇧 London, United KingdomRemote57y ago
Intelance is a UK based consulting firm and a IASME Certification Body across Cyber Essentials, Cyber Essentials Plus, and IASME Cyber Assurance. We also deliver ISO 27001 implementation and audit support to mid-market and enterprise clients across the UK and Europe. We are building a selective associate panel to support a growing book of Cyber Essentials and Cyber Essentials Plus engagements. This is not an employment role. It is a long-term associate relationship for experienced assessors who want steady, well run work, named inclusion on our panel, and a professional home that treats assurance delivery as a craft. Tasks Conduct Cyber Essentials self-assessment reviews against the current IASME question set and issue certification decisions within agreed service levels. Deliver Cyber Essentials Plus technical audits, including vulnerability scanning, authenticated scans, sample device testing, multi-factor authentication validation, and malware protection checks. Write clear, defensible assessment reports and certification recommendations. Guide client technical contacts through remediation where gaps are identified, without drifting into paid consultancy during the certification window. Maintain evidence and audit trails to IASME Certification Body standards. Participate in internal calibration sessions to keep assessment quality consistent across the panel. Where capacity and interest align, support adjacent work across IASME Cyber Assurance Level 1 and Level 2 and ISO 27001 readiness. Requirements Current or recently held IASME assessor licence for Cyber Essentials and Cyber Essentials Plus, or equivalent hands-on delivery experience with a willingness to be licensed under Intelance. Minimum three years delivering Cyber Essentials Plus technical audits in the UK market. Strong working knowledge of the five Cyber Essentials controls, the current question set, and common interpretation edge cases. Practical experience with vulnerability scanning tooling used for
Orbem · 🇩🇪 Munich, GermanyRemote57y ago
We see the potential inside everything and everyone. Starting with you. Orbem uses AI to industrialize MRI, delivering non-invasive insight into everything from fruits to eggs to the human body. We are transforming what is becoming the world's largest biological dataset into actionable intelligence to reduce waste, increase quality, and accelerate the shift toward a more sustainable and healthier future. Headquartered and founded in Munich, Germany, with an office now in Houston, Texas, our world-class team is scaling inside-out technology to transform how humanity sees and understands biological matter. Help us see what's possible. Join us. Your Role You will own Orbem’s Information Security function end-to-end at a pivotal moment. Orbem achieved ISO 27001 certification in December 2025. We are now entering an active stabilization phase: controls are established, our external provider stack is being restructured, and a re-audit sits on the horizon. You will inherit this reality — and the authority to shape it. This is a role for a hands-on, senior security practitioner who wants to shape a security function, not just run one — someone who thrives in ambiguity, makes high-stakes strategic calls with incomplete information, and can do the operational work themselves while orchestrating a deliberate external provider stack. Although we are looking for a strategist, you will also be required to support day-to-day security operations. Your Day-to-Day Strategy & Program Ownership (≈ 40%) Lead our approach to the upcoming ISO 27001 re-audit. Assess the situation, make the strategic recommendation, and own the execution. Set and maintain Orbem’s information security strategy aligned with our stage, our customers (enterprise food today, healthcare in our strategic line of sight), and our risk appetite. Own the information security risk register end-to-end: build it where needed, maintain it, and run the risk review with key leadership peers. Represent Orbem externally with
moia · 🇩🇪 Berlin, GermanyRemote57y ago
<h2>Join us as a Senior Vehicle Security Engineer (all genders) and help safeguard the future of autonomous mobility at MOIA!</h2> <p>At MOIA, vehicle security is a cornerstone of trust in autonomous mobility. As a Senior Vehicle Security Engineer you’ll be part of a dedicated team that ensures our autonomous mobility platform is</p> <p>secure, resilient, and compliant with mobility industry standards. You’ll work across the full product lifecycle of our fully autonomous vehicles like the ID.Buzz AD—from concept to deployment and operations—designing and implementing cybersecurity strategies that protect our users, vehicles, and infrastructure.</p> <p>We’re looking for someone who thrives in cross-functional environments, understands the nuances of embedded systems and distributed architectures, and can translate complex threat models into actionable engineering requirements.</p> <h2><strong>What you will do</strong></h2> <ul> <li><strong>Define cybersecurity concepts</strong> and system boundaries for autonomous mobility features, considering real-world operating environments.</li> <li><strong>Conduct threat analysis and risk assessments (TARA) </strong>in alignment with ISO/SAE 21434, identifying vulnerabilities and evaluating attack feasibility.</li> <li><strong>Translate TARA outcomes into security requirements</strong> and risk mitigation strategies.</li> <li>Collaborate with engineering and safety teams to <strong>embed security into every stage of the product lifecycle</strong>—from design and development to incident response.</li> <li><strong>Ensure ongoing compliance</strong> with cybersecurity standards across multiple projects.</li> <li>Partner with functional safety experts to align cybersecurity and safety requirements.</li> </ul> <h2><strong>What will help you to fulfill your role </strong></h2> <ul> <li>A degree in Electrical Engineering, Computer Science, Automotive Engineering, Physics, or a related field.</li> <li>Hands-on experience with threat mo