Vacatures
Working at Complass
We build a portal that lets companies manage information security and compliance themselves, without spreadsheets and e-mail threads. The software does a lot of it. Consulting, customer contact, operations and expert review need people with experience and judgement. If that sounds like you, send us an unsolicited application.
Where we are looking for people
We are a small team and we are at the beginning. Whether part-time, mini-job or freelance: tell us which area interests you and what you have in mind. We settle which model fits in a conversation.
-
Sales and partner management
You talk to companies, consultancies and IT service providers, show Complass in demos and build our partner network.
What you bring
- Experience in B2B sales of software or consulting
- Understanding of information security or compliance
-
Customer success and onboarding
You accompany customers from the first sign-in to day-to-day use: setup, taking over existing spreadsheets, training and regular check-ins.
What you bring
- Experience in projects or customer care in IT
- Enjoy explaining things clearly to people
-
Certified consulting and audit
You advise customers on the subject, review content of the platform and accompany audits, for example to ISO 27001, TISAX or in data protection.
What you bring
- ISO 27001 Lead Auditor certification, TISAX experience or a data protection qualification
- Practice from your own audits or assessments
-
Operations and platform security
You keep the platform stable and secure: monitoring, updates, backups and restore drills. In an employment, on-call duty according to a rota is part of it.
What you bring
- Experience running Linux servers and web applications
- Calm and care, also when things are urgent
-
Legal and compliance review
You review framework content, templates and texts of the platform on substance and law, for example on NIS2, the GDPR or the Cyber Resilience Act.
What you bring
- Legal training or comparable experience in IT and data protection law
- Precision and an eye for clear wording
How to apply
- Send us an e-mail to jobs@complass.eu with the subject “Unsolicited application” and the area that interests you.
- Tell us briefly about yourself: experience, focus areas, earliest start and the working model you would like. A CV as a PDF is enough; we do not need certificates or a photo.
- We get back to you personally. If it fits, we invite you to a first conversation by video. We do not use AI to pre-select applicants: people read your application.
There is deliberately no upload form and no applicant portal of a third-party provider: your documents go directly to our mailbox. Please do not send details about health, religion or other especially sensitive data.
Privacy notice for applicants
Controller and contact
Complass GmbH, Kölner Tor 31, 40625 Düsseldorf. Data protection questions: info@complass.eu
We have not appointed a data protection officer, as there is no legal obligation to do so.
Which data and what for
We process the details you send us: name, contact details, CV and the content of your message, and in a conversation what you tell us there. The purpose is to review your application, talk to you and decide on working together.
We hold first conversations by video, usually with Microsoft Teams.
We do not take into account any special categories of data (for example on health, religion or origin) that you send us unsolicited when we decide.
Legal basis
The legal basis is Art. 6(1)(b) GDPR (taking steps at your request prior to entering into a contract). If we keep your documents after a rejection so that we can defend ourselves against claims, the legal basis is our legitimate interest under Art. 6(1)(f) GDPR. For adding you to our talent pool (see below) it is your consent under Art. 6(1)(a) GDPR.
Who receives your data
Only the people at Complass who decide on the position read your application. We do not pass your data on to anyone else unless you consent or we are legally required to.
Our mailbox and Microsoft Teams are operated by Microsoft Ireland Operations Ltd., Ireland, as our processor within the EU Data Boundary of Microsoft. Microsoft Ireland is a subsidiary of Microsoft Corporation in the USA; for transfers to the USA in individual cases the adequacy decision on the EU-US Data Privacy Framework applies (Art. 45 GDPR), otherwise the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR). More in the privacy policy
Sending by e-mail
Applications arrive by e-mail. E-mails are usually transmitted with transport encryption but are not end-to-end encrypted and can in principle be read on the way. Please therefore send us only what is necessary for your application.
How long we keep your data
If we do not work together, we delete your documents six months after our rejection. This period follows the time limits for claims under the German General Equal Treatment Act (Section 15(4) AGG, Section 61b ArbGG).
If we work together, we transfer the necessary details to the personnel file or the contract records.
Talent pool: if you would like us to keep your documents for later positions, we first ask for your consent by e-mail. With your consent we keep them for 12 months. You can withdraw your consent at any time with effect for the future; we then delete your documents.
No obligation, no automated decision
You are not obliged to give us your data. Without the details needed for the review (name, contact details, CV), however, we cannot process your application. No automated decision-making including profiling takes place; we do not use AI to pre-select applicants.
Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw a consent you have given at any time. You can also lodge a complaint with a data protection supervisory authority. privacybeleid
Send us an unsolicited application
A short e-mail with your CV is enough. People read your application, and we answer personally.