GRC Manager (f/m/d)

At Enpal, we are pursuing the dream of building the largest renewable energy community in Europe. We rent out solar systems, electricity storage, wall boxes, and smart meters at an all-inclusive rate, all intelligently connected through our AI-powered platform Enpal One+. True to the motto “digital, decentralized, and 100% renewable”, our heart beats for both the rapid growth of a company and for combating the greatest challenge of our generation - climate change.

The GRC / ISMS Manager is responsible for the development, operational management and continuous improvement of the company’s governance, risk and compliance framework as well as the Information Security Management System (ISMS).
The role acts as a key interface between Information Security and business functions, ensuring that security governance, regulatory expectations, risk transparency and audit readiness are embedded in a pragmatic and scalable way.
This is an individual contributor manager role without disciplinary people management responsibility and with direct reporting to the CISO.

What you'll do

• Develop, maintain and continuously improve the ISMS, including policies, standards, procedures and control frameworks.

• Coordinate security governance activities and ensure alignment with internal requirements, regulatory obligations and business priorities.

• Perform and facilitate information security risk assessments, control reviews and remediation tracking.

• Prepare, coordinate and support internal and external audits, certifications and compliance reviews.

• Maintain risk registers, control documentation, evidence repositories and management reporting materials.

• Partner with stakeholders across Technology, Product, Legal, Compliance, Data Protection, Operations and other business areas to implement security and compliance requirements.

• Support third-party risk management activities, including assessment coordination, documentation review and follow-up actions.

• Develop reporting for senior management and the CISO, including KPIs, KRIs, control status and risk exposure updates.

• Drive awareness of governance and security requirements through documentation, guidance and cross-functional enablement.

What you'll bring

• Several years of professional experience in GRC, ISMS, Information Security, IT Risk, Audit or Compliance.

• Strong working knowledge of common frameworks and standards such as ISO 27001, NIST, SOC 2 or comparable control frameworks.

• Proven experience in policy development, risk management, audit preparation and evidence-based compliance work.

• Ability to work effectively in cross-functional, fast-paced and evolving business environments.

• Strong analytical, organizational and stakeholder management skills.

• Excellent written and verbal communication skills in English; German is a strong advantage.

Success Profile

• Structured and detail-oriented, while able to balance governance quality with business pragmatism.

• Confident working with both technical and non-technical stakeholders.

• Comfortable taking ownership in a fast-scaling environment with short decision paths and high visibility.

What we offer

• Work at Germany's first green unicorn - Play an active role in shaping the solar energy transition.

• The sun shines all over the world - At Enpal, you'll work with a highly motivated, diverse team of over 65 nationalities.

• The ideal setup for your focus - We are convinced that excellent results are achieved when the conditions are right. That's why we rely on a hybrid working concept that gives you the freedom to always work in the way that best suits your tasks. Do you need new inspiration on an international level? With Workflex, we offer you the opportunity to relocate abroad for up to 30 days a year, depending on your responsibilities.

• Grown-up business & startup spirit - In our modern office in Berlin-Friedrichshain, you'll find everything your heart desires, from height-adjustable desks and table tennis to stocked beverage fridges and barista coffee.

• Your kick-start at Enpal - Onboarding day with a welcome bag, buddy program, and a team that really supports you.

• Stay up to date & help shape the future - Transparent all-hands meetings, short decision-making processes, and an open feedback culture - without mistakes, there is no progress.

• The energy transition can only be achieved together - At Enpal, you can expect legendary team spirit and unforgettable team events.

• Your extra boost - 29 + 2 vacation days, discounted membership at Wellhub, and corporate benefits. Everything you need to help you achieve a good work-life balance.

At Enpal, we are proud of the diversity of our team. No decisions are made on the basis of skin colour, religion or religious belief, ethnic or national origin, nationality, gender identity, sexual orientation, disability or age, either during recruitment or employment. Enpal stands for a safe workplace and takes action against discrimination and harassment of any kind.