Compliance Coordinator (all genders)

Become part of Fairmas as a Junior Compliance Coordinator (all genders) and help us build a solid foundation for our information security management system. The role sits at the intersection of compliance, information security, process management, and documentation — coordinating requirements, structuring evidence, and making our processes audit-ready. You will work closely with management, IT, HR, legal, and data protection, acting as a coordinating and documenting function rather than the sole owner of all information security.

Location: Based in Berlin | Full-time or part-time | Monday to Friday | Work-life balance guaranteed. Do you have a sharp eye for detail, a talent for turning complex requirements into clear documentation, and a genuine interest in information security and compliance? Do you enjoy staying on top of open tasks, deadlines, and responsibilities across multiple teams? Then Fairmas is the right place for you. Balance: No weekend work, no shifts, no overtime.

Appreciation: Fair pay and a safe working environment. Flexibility: Work remotely and from our modern Berlin office – 3 days/week in the office required. Understanding: Many of us come from the hotel industry ourselves. Purpose: Help hotels around the world stay economically successful. Sustainability: Our offices are eco-friendly and perfectly connected. Mobility: We subsidize your Deutschlandticket. Growth: Through team events and personal development – we support what makes you unique.

Foundation: Degree/ background in business law, IT law, business informatics, compliance, quality management, or a related field — or a relevant lateral entry from data protection, audit support, or process management. Compliance mindset: Ability to read, understand, and translate requirements from standards, contracts, and regulations into tasks and documentation. Security interest: First exposure to ISO 27001, information security, data protection, or audit processes is a plus IT fluency: You don’t need to be a sysadmin, but you understand basic IT and security concepts such as user and access management, cloud systems, backup, change management, and incident management, and communicate confidently with technical colleagues.

Writing strength: Excellent written German and English; able to document complex topics clearly, precisely, and in an audit-ready way. Structure: Systematic, thorough, and reliable — you keep track of open points, deadlines, and responsibilities without being prompted. Collaboration: Professional and clear communicator with management, IT, legal, HR, and data protection stakeholders. Discretion: High sense of responsibility when handling sensitive information.

Tools: Experience with tools such as Confluence, Jira, SharePoint, Notion, Excel, or GRC tools is a benefit. Regulatory knowledge: Basic knowledge of GDPR, IT law, data protection law, or contract review is a plus Industry background: Experience in a software, SaaS, or IT-oriented company is an advantage. Employment Eligibility: Must be legally authorized to in Germany. ISMS Development: Support the setup, structuring, and maintenance of our ISO 27001-compliant information security management system — as a coordinating and documenting function in close exchange with management, IT, HR, legal, and data protection.

Requirements Analysis: Break down ISO 27001 controls, identify gaps, assign responsibilities, and track required evidence. Documentation: Create, revise, and maintain policies, process descriptions, work instructions, checklists, and audit evidence documents. Audit Preparation: Compile and organize audit materials; ensure all required evidence is in place and traceable. Task Tracking: Maintain an up-to-date action and task plan including status, owners, deadlines, and open items.

Risk Management: Assist with gap analyses, risk assessments, and documenting risk treatment measures. Cross-Team Coordination: Gather information and coordinate with IT, HR, legal, data protection, management, and relevant departments. Process Documentation: Document security processes such as access management, change management, incident management, backup, vendor management, asset management, and awareness programs.

Follow-Through: Track and close open points from internal reviews, external consultations, audits, and management decisions. Stakeholder Communication: Prepare clear decision bases and summaries for management and business units. Ready to Join Us? Send us your CV – feel free to include your earliest possible start date. If you have any questions, reach out to us at [email protected] – we’re happy to help. You don’t meet every single requirement or have gaps in your resume?

No problem! Apply anyway – what matters most to us are your motivation, values, and personality.