Nect is an award-winning IT company based in Hamburg and stands for the implementation of fully automated trust services with highly developed technology. The technology developed and patented by Nect was first used by RV Versicherung in 2018 in the form of Nect Ident, an AI-based online identification via app. The customer base now includes other well-known companies such as Telekom Deutschland and BARMER. In addition to Nect Ident, the company also offers Nect Sign, a solution for qualified electronic signatures (QES), as well as the Nect Wallet, which acts as a digital ID card and allows digital identities to be reused in just a few seconds. At Nect we consider our compliance and risk management as a strategic advantage. In tight collaboration with authorities and regulators we were able to create new opportunities and create value for our users and customers beyond what was thought to be possible. Collaborate closely with our Product Management, technical teams and other compliance related roles to craft a compliance system that fits our needs. Your impact will be decisive for the success of our teams and products. Report directly to C-Level, providing regular compliance and risk reporting and representing Nect in regulatory and audit contexts. Own and maintain internal compliance and security policies and procedures, driving adherence across the organization and escalating non-compliance to leadership where necessary. Own and maintain our business continuity management framework, ensuring preparedness across teams and alignment with regulatory expectations. Manage day-to-day GDPR compliance in collaboration with our external DPO, including records of processing activities, data processing agreements, and flagging data protection implications in product development. Draw on domain experts (Product, InfoSec, IT SOC, IT, Engineering, etc) to ensure our compliance system has the necessary substance across all areas. Maintain a clear overview of the regulatory environment. Lead certifications and audits. Drive compliance awareness across the organization, including coordinating staff training in collaboration with leadership. 5y experience as a GRC Manager in practice. Familiarity with frameworks such as eIDAS, DORA, or ISO 27001 is a plus. Confident and composed communicator, able to convey complex topics clearly, calmly, and appropriately to different stakeholders. Assertiveness with tact and sensitivity. Highly self-driven, structured, and precise working style, paired with strong problem-solving capabilities in a dynamic, highly regulated environment. Fluency in German or English at a professional level. Flexible working and a modern working environment Scale-up culture with security and vision: digital, innovative, ambitious Flat hierarchies and quick decisions: real scope for your ideas Personal development: in a growing tech company with a future Modern office in Hamburg: central location between the Elbe and Alster rivers with a pleasant working atmosphere Health benefits: company health insurance package Team spirit: regular events and exchanges in a motivated environment Catering support: subsidy for your daily meals/snacks Then apply now - we look forward to hearing from you!