Compliance & Certifications Associate
Posted 21hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Compliance associate building ISO 27001, SOC 2, governance, and vendor-risk processes for Credibur’s non-bank lending platform. Supporting regulatory reporting and legal operations as the fintech scales.
Responsibilities:
- Lead the internal side of Credibur’s ISO 27001 certification and future SOC 2 certification
- Coordinate with external advisors and lead the internal certification plan
- Collect and organise certification evidence and track deliverables to completion
- Draft, maintain, and improve internal policies
- Keep the governance framework up to date as the company grows
- Manage outsourcing compliance and ensure regular reporting to bank partners is accurate and timely
- Conduct vendor due diligence and maintain ongoing third-party risk checks
- Organise and maintain contracts
- Carry out first-pass contract reviews
- Support legal counsel with day-to-day matters
- Work closely with the founder and external advisors
- Integrate legal and certification requirements into company operations and keep employees informed and involved
Requirements:
- Around two to five years of experience in compliance, governance, risk, or audit
- Experience from an advisory or audit firm, or in-house at a fintech or regulated business
- Hands-on experience with at least one certification: ISO 27001, SOC 2, or comparable
- Understanding of auditor expectations and effective evidence
- Pragmatic, risk-based approach to compliance
- Ability to coordinate across teams and keep deadlines on track
- Structured and detail-oriented
- Clear written German and English
- Regulatory and bank-partner work is conducted in German
- Familiarity with MaRisk or DORA is helpful
- Degree in risk, compliance, or security management is nice to have
- Familiarity with outsourcing regulation is nice to have
- Exposure to lending, payments, or financial services is nice to have
Benefits:
- Flexible schedule and location
- Remote within Germany; Berlin is not required
- Full-time or part-time option
- Competitive compensation based on experience and responsibility
- VESOP participation
- Real influence over compliance processes and tooling
- No billable hours or audit-season crunch
- Direct line to a management team experienced in compliance



















