This position is posted by Jobgether on behalf of a partner company. We are currently looking for a (Senior) Information Security Officer in Germany.
This role places you at the forefront of safeguarding critical technology systems and customer data in a high-stakes, regulated environment. You will act as a trusted security advisor to both internal teams and German-speaking clients, supporting pre-sales, audits, and compliance initiatives. The position involves hands-on management of security processes, risk assessments, and vendor oversight while maintaining and improving an ISO 27001-aligned ISMS. You will collaborate across Engineering, IT, Sales, and Customer Success teams to strengthen security baselines, address inquiries, and translate technical risks into actionable guidance. The ideal candidate combines strong technical expertise, regulatory knowledge, and excellent communication skills to ensure robust, compliant, and trusted operations.
Accountabilities:
- Respond to customer security questionnaires, RFPs, and due-diligence requests, collaborating with Sales and Pre-Sales teams
- Represent the organization’s security posture during customer calls and regulatory engagements
- Maintain, operate, and enhance the Information Security Management System (ISMS) in alignment with ISO 27001
- Conduct risk assessments, internal audits, and support certification readiness through documentation and process enforcement
- Monitor corporate and platform security, including infrastructure, integrations, and vendor assessments
- Collaborate with cross-functional teams to strengthen security baselines, improve endpoint and access security, and contribute to internal security awareness
- Translate complex security and compliance topics into clear guidance for technical and non-technical stakeholders
Requirements:
- 5+ years’ hands-on experience in Information Security, IT Security, or GRC roles within a B2B tech or SaaS environment
- Proven experience operating and improving ISO 27001-aligned ISMS, including policy creation, risk assessments, audits, and certification maintenance
- Familiarity with SOC 2, DORA, NIS 2, or similar regulatory frameworks
- Solid understanding of IT security fundamentals, including authentication, endpoint security, encryption, and network concepts
- Technical proficiency across macOS, Windows, and Linux environments
- Experience liaising with auditors, certification bodies, and regulatory authorities
- Relevant certifications desirable (e.g., ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CRISC, CompTIA Security+)
- Fluent in German and English, with excellent communication and documentation skills
- Bonus: Experience with IAM tools, MDM solutions, enterprise security platforms, SaaS security tooling, GDPR compliance, and 3rd-party risk management
Benefits:
- Hybrid working model with flexible arrangements across Munich and Berlin
- Competitive salary package with additional benefits
- Professional growth opportunities in a fast-growing, mission-driven tech environment
- Collaborative, inclusive, and supportive company culture
- Exposure to cutting-edge AI and fraud detection technologies in a high-impact role
- Opportunity to work closely with international teams and customers in regulated industries
How Jobgether works:
We use an
AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1