GRC Manager (f/m/d)

At Enpal, we are pursuing the dream of building the largest renewable energy community in Europe. We rent out solar systems, electricity storage, wall boxes, and smart meters at an all-inclusive rate, all intelligently connected through our AI-powered platform Enpal One+. True to the motto “digital, decentralized, and 100% renewable”, our heart beats for both the rapid growth of a company and for combating the greatest challenge of our generation - climate change.

The GRC / ISMS Manager is responsible for the development, operational management and continuous improvement of the companys governance, risk and compliance framework as well as the Information Security Management System (ISMS).

The role acts as a key interface between Information Security and business functions, ensuring that security governance, regulatory expectations, risk transparency and audit readiness are embedded in a pragmatic and scalable way.

This is an individual contributor manager role without disciplinary people management responsibility and with direct reporting to the CISO.

What youll do

Develop, maintain and continuously improve the ISMS, including policies, standards, procedures and control frameworks.

Coordinate security governance activities and ensure alignment with internal requirements, regulatory obligations and business priorities.

Perform and facilitate information security risk assessments, control reviews and remediation tracking.

Prepare, coordinate and support internal and external audits, certifications and compliance reviews.

Maintain risk registers, control documentation, evidence repositories and management reporting materials.

Partner with stakeholders across Technology, Product, Legal, Compliance, Data Protection, Operations and other business areas to implement security and compliance requirements.

Support third-party risk management activities, including assessment coordination, documentation review and follow-up actions.

Develop reporting for senior management and the CISO, including KPIs, KRIs, control status and risk exposure updates.

Drive awareness of governance and security requirements through documentation, guidance and cross-functional enablement.

What youll bring

Several years of professional experience in GRC, ISMS, Information Security, IT Risk, Audit or Compliance.

Strong working knowledge of common frameworks and standards such as ISO 27001, NIST, SOC 2 or comparable control frameworks.

Proven experience in policy development, risk management, audit preparation and evidence-based compliance work.

Ability to work effectively in cross-functional, fast-paced and evolving business environments.

Strong analytical, organizational and stakeholder management skills.

Excellent written and verbal communication skills in English; German is a strong advantage.

Success Profile

Structured and detail-oriented, while able to balance governance quality with business pragmatism.

Confident working with both technical and non-technical stakeholders.

Comfortable taking ownership in a fast-scaling environment with short decision paths and high visibility.

What we offer

Work at Germanys first green unicorn - Play an active role in shaping the solar energy transition.

The sun shines all over the world - At Enpal, youll work with a highly motivated, diverse team of over 65 nationalities.

The ideal setup for your focus - We are convinced that excellent results are achieved when the conditions are right. Thats why we rely on a hybrid working concept that gives you the freedom to always work in the way that best suits your tasks. Do you need new inspiration on an international level? With Workflex, we offer you the opportunity to relocate abroad for up to 30 days a year, depending on your responsibilities.