Governance, Risk and Compliance Engineer (gn)

We're looking for a GRC Engineer with experience in information security, risk management, or compliance to help us achieve our initial ISO 27001 certification.
Enjoy working in a friendly, international team? Read on and apply!

We are Unite.

We connect the economy for sustainable business. Our trusted e-procurement platform with its integrated marketplace enables effortless sourcing and purchasing for B2B and public sector organisations.
Bringing buyers and suppliers together for mutual benefit, we’ve established a solid foundation of fair competition and trustworthy partnerships. Our platform’s scalable infrastructure supports connections, business stability and a robust supply chain.
We revolutionise procurement for B2B and the public sector by adding and sharing value for markets and communities. In 2022, we became the first platform business accredited with the Fair Tax Mark, representing the global standard for responsible tax conduct.

Would you like to become a part of Unite?
Our company was founded as Mercateo in 2000 and the headquarters is located in Leipzig, Germany. We operate in 12 European countries, with over 700 employees working both in-office and remotely. In 2024, we achieved revenue of €448.7 million. For more information, visit unite.eu.

Your role

Audit excellence: You actively support the preparation and execution of ISO 27001 certification, along with internal and external IT audits, ensuring evidence, controls, and documentation are audit-ready
Own what matters: You own defined parts of the ISMS, defining controls, documentation, and processes, contributing to continuous improvement
Set the standard: You support creating and maintaining policies like the Acceptable Use Policy and help implement them with IT, platform, and business teams
Build resilience: You contribute to risk assessments, business impact analyses, and maintain and improve IT emergency and recovery plans
Make security everyone's mission: You assist with security initiatives such as phishing awareness programs, penetration tests, certifications like Cyber Essentials Plus, and supplier security reviews, coordinating actions with stakeholders
Guard the ecosystem: You participate in information security assessments of third parties, suppliers, and projects, evaluating security and compliance aspects
Turn data into clarity: You prepare reports, metrics, and dashboards on risk and compliance status to support audits, decisions, and transparency

Your qualifications

Hands-on security expertise: You have practical experience in information security, IT risk, or compliance in a corporate environment
Audit-ready know-how: You have experience with or exposure to ISO 27001, ISMS processes, or audit preparation
Tech-savvy foundation: You have a basic understanding of technical IT environments (e.g., cloud, infrastructure, identity & access, platforms, software development)
Cross-functional coordination: You are experienced in project management and coordination across diverse IT topics
Trusted collaborator: You are structured and reliable in your work style, collaborating effectively with technical teams, business stakeholders, and auditors
Framework fluency: You are familiar with frameworks like NIST, SOC 2, or GDPR
Language: You are fluent in German and English

Interested? Then apply directly.

Apply now

What you can expect from us

Enjoy our Unite culture: A high degree of creative freedom in a dedicated environment where our employees further develop the leading B2B platform with the help of a modern technology landscape
Be a part of our agile working style: We see ourselves as an agile software company with flat hierarchies, open communication, and a transparent, fair corporate culture
We think long-term: A family-friendly environment with a healthy work-life balance, which we see as an indispensable foundation of your daily motivation
Leave your mark from day one: The opportunity to shape our ISMS from the ground up as we work toward our initial ISO 27001 certification
Teamwork: Our team works remotely across Europe, with the option to use our offices in Leipzig, Köthen, or Munich
We offer a flexible work location: The option for mobile work or at one of our locations in Leipzig, Köthen, or Munich
Personal growth: We encourage you to invest 10% of your working time in personal development and we actively support you in doing so