Information Security Manager (m/f/d)

To reach the next level in information security, we are looking for a motivated information security manager who will help handle and manage security requirements, monitor our compliance with ISO27001, lead new security-related initiatives (e.g., SOC 2), and be the person to talk to our customers and respond to all vendor security questionnaires. In this role, you will directly report to the CTO and CRO.

What you’ll do:

‐ With the support and expertise of our current (interim) Information Security Manager, you will take the lead in implementing or enhancing information security controls, with a focus on SOC2. Your role will involve ensuring that these controls align with applicable laws, regulations, and industry standards (such as GDPR and ISO27001), as well as meeting customer and business requirements.

‐ You monitor, investigate and resolve issues, create reports, conduct security assessments, and drive security programs within the company and its processes and employees.

‐ You oversee the implementation and management of security technologies around our SaaS product.

‐ You support our departments with all information security-related questions during the proposal and negotiation processes with potential clients/customers.

‐ You develop and deliver security awareness and training programs to educate employees on security best practices and promote/maintain a culture of security throughout the organization.

‐ You conduct regular security assessments and audits to identify gaps in our security posture and recommend appropriate remediation actions.

‐ You own the company device management to ensure compliance with regulations and industry standards.

Your Profile

‐ You have a Bachelor’s or Master’s degree in IT security, information systems, computer science, technology management, or an apprenticeship in similar fields and a first good idea of information security-related questions.

‐ You have a good understanding of the security challenges and solutions of modern cloud-based SaaS providers.

‐ 1+ year of working experience with Information Security Management Systems, including risk assessment, threat management, and incident response.

‐ You enjoy solving problems and are passionate to combine strong security with the fast-moving environment of a SaaS product management startup.

‐ You are a self-driven project manager who is familiar with the different workstreams of an ISO 27001 and SOC 2 certification in a structured manner.

‐ Have a rough understanding of the client-server architecture underlying modern web applications and the best practices of securing them (such as OWASP Top 10), as well as an understanding of cloud hosting and the technologies used for it (k8s, infrastructure as code).

‐ Ability to communicate with colleagues at all levels throughout the business to develop strong relationships with different stakeholders.

‐ Excellent written and spoken English and interpersonal skills to effectively collaborate with cross-functional teams and stakeholders at all levels. German is a plus.

‐ Provide a clean criminal record certificate

‐ Availability - ASAP.

‐ Dieses  Stellen­inserat  wurde  zuerst  auf  z­uhause­jobs.com  gepostet.

Why Us?

You'll join a diverse and world-class team with plenty of opportunities for personal growth, impact, and learning.

‐ Boost your personal development and gain new skills in an exhilarating space.

‐ Competitive compensation based on prior experience.

‐ Flexible working hours.

‐ Equipment support: MacBook Pro or notebook and monitor of your choice.

‐ Learning budget: We enjoy learning and growing while working on hard problems together. Every year you can spend your learning budget on your professional development (courses, books, classes).

‐ Remote first team: Work from our cool HQ in Hamburg or anywhere - forever!