About the company
HelloFresh is one of Europe's fastest-growing tech powerhouses with a diverse global community of 90+ nationalities.
Responsibilities
- Lead end-to-end compliance readiness for NIS2 and support alignment across other key frameworks (e.g., PCI DSS, CSRD, ISO/SOC and EU AI Act).
- Plan and execute internal control assessments and coordinate external compliance audits on a defined cadence.
- Translate regulatory requirements into practical controls; drive cross-functional implementation across international teams.
- Own remediation management: track findings, evidence, owners, deadlines, and report status to stakeholders.
- Improve GRC maturity through continuous monitoring, clear documentation, and mentoring junior team members.
- Lead internal assessments and coordinate external compliance audits at planned intervals.
- Evaluate and validate the design and operational effectiveness of security policies, standards, and internal controls.
- Develop comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences.
Requirements
- 3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.).
- Ability to interpret compliance regulations and map them to the actual implementation of systems, whilst referencing various security frameworks.
- Experience supporting data privacy regulations (GDPR, CCPA) and third-party risk management programs.
- Experience with developing and executing security awareness programs and trainings.
- Highly organized and detail-oriented, with an ability to work independently.
- Industry compliance certifications (CISA, CISM, CISSP) are a plus.
- Prior experience working in a SaaS environment, mainly Cloud and AWS-based.
Conditions
- Competitive compensation package with perks like a HelloFresh-subsidized Pension Scheme, Berlin relocation support, and a Hybrid working model.
- Exclusive discounts on your weekly HelloFresh box and office meals.
- German language learning budget and access to the HelloFresh Academy.
- Mental health support, transportation perks, and working-parent-friendly benefits.
- 24/7 gym access, wellbeing platforms like Headspace and Spill, and sabbatical leave options.