Governance, Risk and Compliance Engineer (m/f/d)

You have experience in information security, risk management or compliance and want to help us achieve our first ISO 27001 certification? As GRC Engineer (gn) you are right with us! You like working in a friendly, international team? Then we'll get you!

Are you ready to reinvent procurement? At Unite, we have been working successfully for more than 25 years to improve purchasing in companies and public organizations – digital, effective and sustainable, supported by technology with attitude. Our Procurement solution “made in Europe” creates transparency, fairness and real data sovereignty. It is further developed by over 700 international employees who think courageously, live responsibility and celebrate diversity. If you really want to move something, get in and shape the future of procurement with us.

Become part of the leading European B2B platform as

Governance, Risk and Compliance Engineer (gn)

Place of work: Köthen (DE), Leipzig (DE), Munich (DE) Audit excellence: You actively support the preparation and implementation of ISO 27001 certification as well as internal and external IT audits and ensure that proofs, controls and documentation are auditable Responsibility: You are responsible for certain parts of the ISMS, define controls, documentation and processes and contribute to continuous improvement Set standards: You support the creation and maintenance of policies such as Acceptable Use Policy and help them implement IT, platform and corporate teams Strength Resilience: You contribute to risk assessments and business impact analyses and improve IT emergency and recovery plans Make security the task of all: You support security initiatives such as phishing awareness programs, vulnerability tests, certifications such as Cyber Essentials Plus and supplier safety reviews, and coordinate actions with stakeholders Protect our system landscape: You participate in information security assessments by third parties, suppliers and projects and evaluate security and compliance aspects Create transparency from data: you’ll set up reports, key figures and dashboards for risk and compliance status to support audits, decisions and transparency

Security with hands-on mentality: You have practical experience in information security, IT risks or compliance in a business environment Fit for every audit: You have experience or knowledge of ISO 27001, ISMS processes or audit preparation TIT confession as a basis: You have basic knowledge of technical IT environments (e.g. cloud, infrastructure, identity and access, platforms, software development) Functional coordination: You have experience in project management and coordination of various IT topics Reliable team player: You work structured and reliable and cooperate effectively with technical teams, business interests and auditors Framework knowledge: You are familiar with frameworks such as NIST, SOC 2 or GDPR Language: You speak fluent German and English

Look forward to our Unite culture: Much creative freedom in a motivating environment in which our employees, together with state-of-the-art technology, develop the leading B2B platform Become part of our agile working style: We are an agile software company with flat hierarchies, open communication and a transparent, fair corporate culture We think in the long term: a family-friendly environment with a healthy work-life balance that we consider to be an indispensable basis for your daily motivation Designs from the beginning: You have the opportunity to shape our ISMS from scratch while we work on our first ISO 27001 certification Teamwork: Our team works remotely across Europe, with the option of using our offices in Leipzig, Köthen or Munich We offer a flexible working place: You have the opportunity to work mobile or at one of our locations in Leipzig, Köthen or Munich Personal development: We encourage you to invest 10% of your working time in your personal development and actively support you