[Hiring] Junior Compliance Manager @Noxtua

Role Description

As a Junior Compliance Manager at Noxtua, you'll join our Legal & Compliance team, which consists of six experienced people who work closely with Product, Engineering, and GTM. Together, we keep these standards high and make them one of Noxtua's strongest selling points. Compliance at Noxtua isn't a back-office function.

Your hiring manager, Robert Kilian, Chief Legal Officer at Noxtua, has served as General Counsel and on the supervisory board of an established fintech, and has co-founded two compliance start-ups. He sits on the board of the German AI Association and teaches digital regulation at Humboldt University in Berlin.

In our Legal & Compliance team, we like to keep hierarchies flat: everyone owns their topics and gets the trust and room to drive them. We encourage open discussion and feedback, and we're always looking for new ways to bring innovation into our daily work.

This is a role for someone early in their career who wants to learn compliance where it really matters. Noxtua holds a wide range of certifications, from ISO 27001 and ISO 42001 to BSI C5 and TISAX, and works under the EU AI Act and GDPR. You'll have the opportunity to get hands-on experience across all of them, guided by experienced colleagues who enjoy sharing what they know.

You'll also be at the forefront of how legal work is changing: testing new features on real matters and automating routine tasks. Few legal teams get to shape the tools that will define their profession - we're one of them.

Qualifications

• A degree in law, business, information management or a related field.
• Internships or first work experience in compliance, data protection, audit or information security are a plus.
• Enjoy keeping track of many moving parts, such as controls, evidence, deadlines, and owners.
• Attention to detail and ability to notice discrepancies.
• Proactive and open-minded attitude; able to take initiative and work independently.
• Curious about new ideas, open to feedback, and willing to try new approaches.
• Calm under pressure; able to focus, set clear priorities, and deliver reliable work under tight deadlines.
• Interest in regulation and technology, particularly GDPR, the EU AI Act, and security standards.
• Ability to explain requirements in plain language to engineers or sales colleagues.
• Comfortable with Confluence, Jira, spreadsheets, and AI tools; enjoys finding ways to automate repetitive work.
• Excellent German and English, both written and spoken.

Requirements

• Support our certification cycle (ISO 27001, 9001, 27017, 27018, 42001; BSI C5; SOC 2; TISAX): collect evidence, track controls and corrective actions, and help prepare internal and external audits.
• Maintain our compliance documentation: keep policies and records up to date, and help grow and refine the knowledge base the whole company relies on, from internal documentation to questionnaire answers.
• Handle customer and partner compliance requests: answer information security questionnaires and due diligence requests, using AI tools to work faster and more accurately.
• Monitor regulatory developments, such as the EU AI Act, GDPR guidance, and professional-secrecy rules, and understand what they mean for Noxtua.
• Coordinate data protection processes: data subject requests, vendor and sub-processor reviews, and DPA tracking.
• Help run compliance awareness across the company, from onboarding training to clear self-service guidance.

Benefits

• 100% remote work possible (given a German residence), other countries upon request.
• Flexible working hours.
• 26 days vacation + December 24th & 31st off, + 1 additional vacation day per year of employment (up to 30 days).
• Discounts, e.g., Urban Sports Club Membership, depending on location.
• Laptop (Lenovo or Mac), plus a home office setup budget (paid with your first salary).