Compliance & Certifications Associate

Posted 21hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Compliance associate building ISO 27001, SOC 2, governance, and vendor-risk processes for Credibur’s non-bank lending platform. Supporting regulatory reporting and legal operations as the fintech scales.

Responsibilities:

  • Lead the internal side of Credibur’s ISO 27001 certification and future SOC 2 certification
  • Coordinate with external advisors and lead the internal certification plan
  • Collect and organise certification evidence and track deliverables to completion
  • Draft, maintain, and improve internal policies
  • Keep the governance framework up to date as the company grows
  • Manage outsourcing compliance and ensure regular reporting to bank partners is accurate and timely
  • Conduct vendor due diligence and maintain ongoing third-party risk checks
  • Organise and maintain contracts
  • Carry out first-pass contract reviews
  • Support legal counsel with day-to-day matters
  • Work closely with the founder and external advisors
  • Integrate legal and certification requirements into company operations and keep employees informed and involved

Requirements:

  • Around two to five years of experience in compliance, governance, risk, or audit
  • Experience from an advisory or audit firm, or in-house at a fintech or regulated business
  • Hands-on experience with at least one certification: ISO 27001, SOC 2, or comparable
  • Understanding of auditor expectations and effective evidence
  • Pragmatic, risk-based approach to compliance
  • Ability to coordinate across teams and keep deadlines on track
  • Structured and detail-oriented
  • Clear written German and English
  • Regulatory and bank-partner work is conducted in German
  • Familiarity with MaRisk or DORA is helpful
  • Degree in risk, compliance, or security management is nice to have
  • Familiarity with outsourcing regulation is nice to have
  • Exposure to lending, payments, or financial services is nice to have

Benefits:

  • Flexible schedule and location
  • Remote within Germany; Berlin is not required
  • Full-time or part-time option
  • Competitive compensation based on experience and responsibility
  • VESOP participation
  • Real influence over compliance processes and tooling
  • No billable hours or audit-season crunch
  • Direct line to a management team experienced in compliance