Chief Information Security Officer (CISO)

Our mission

Seven Education (formerly Sdui Group) develops a smart, AI‑powered platform that helps schools and educational institutions work more efficiently. Our products reduce administrative workload, improve communication and enable teachers, institutions, and decision-makers to focus on what matters most: learning, growth and people.
As a European EdTech group with 350+ employees, we build intuitive and scalable solutions used widely across the education landscape. Every day, they help create clarity, streamline workflows and strengthen collaboration. We build with courage, ownership and meaningful collaboration - and we stay inspired by the real impact our products create for the people at the heart of education. Our ambition is clear: to become Europe’s leading EdTech brand.

If you want to join that journey and grow with us, we would love to hear from you.

Your mission

As Chief Information Security Officer (CISO) at Seven Education, you will build and scale a group-wide approach to information security, data privacy, and emerging AI governance across our diverse European software group. In a lean setup, you will create practical standards that work across multiple entities, products, and maturity levels, while helping the business meet customer, audit, and regulatory expectations. This role is about creating structure, building credibility, and turning security and privacy into a visible, embedded part of how the group operates.

What you’ll do

• Define and lead a group-wide strategy for information security, data privacy, and adjacent AI governance across multiple entities, countries, and products
• Build a practical operating model that standardizes policies, controls, evidence, and reporting, and brings ISO 27001 onto one scalable group-wide platform
• Establish and strengthen GDPR/privacy capabilities, including policies, records of processing activities, standard processes, and credible external documentation
• Embed security and privacy into Product, Engineering, and Cloud Operations, ensuring standards are reflected in development, platform, and operational practices
• Support customer and commercial processes by handling security and privacy questionnaires, RFQs, customer DPO requests, and broader compliance-related communication
• Build governance, awareness, and training structures across the group, while providing clear visibility, priorities, and risk guidance to executive leadership
• Shape the future setup of the function, including internal team design and the effective use of external partners such as the external DPO

What you’ll bring

• Proven experience leading information security and data privacy in an international, multi-entity software, SaaS, or cloud environment
• A strong track record of standardizing security and privacy across decentralized organizations and balancing local realities with group-wide standards
• Hands-on experience with ISO 27001 implementation, audit readiness, control frameworks, evidence management, and ideally GRC platforms such as Drata, Vanta, or similar tools
• Strong practical understanding of SaaS and cloud security, with experience embedding security into Product, Engineering, and Cloud Operations rather than running it as a separate function
• Solid GDPR/privacy expertise in software or platform businesses, including customer-facing communication on privacy, compliance documentation, questionnaires, and DPO-related requests
• The ability to work credibly and pragmatically with customers, prospects, and internal stakeholders in privacy-sensitive or regulated environments, ideally including public-sector contexts
• A builder mindset, with experience driving change in lean setups, building high-impact teams, and influencing senior stakeholders through clarity, prioritization, and execution
• Excellent English skills; German and Spanish are a plus

Where you’ll be

This role is based in Hamburg, Berlin, or Koblenz and works in a hybrid setup. You combine flexible remote work with regular onsite presence at one of our hubs, as personal exchange is an important part of how we collaborate, learn, and grow together. Being on site supports close cross-functional collaboration, strong alignment across the group, and a real connection to our culture.

What we offer

• Purpose & Social Impact: At Seven Education, you contribute to shaping the future of education in Europe and help improve the daily work of schools. You can take two paid days per year for volunteer activities.
• Flexibility & Modern Work: Flexible working hours, hybrid models, remote work and workations within the EU, Switzerland and the UK are part of how we work.
• Learning & Development: Dedicated learning time, access to learning platforms, language courses in German and English, and continuous development opportunities support your personal and professional growth.
• Team & Collaboration: You will work in a supportive, collaborative environment that values trust, openness and teamwork. A team-building budget is available for workshops and shared events.
• Ownership & Growth: You will have the opportunity to take responsibility, shape structures and grow with a company that combines a start-up mindset with the ambition to build a leading European software group.
• Time Off & Everyday Perks: 30 days of paid vacation, half-days off on Christmas Eve and New Year’s Eve, and dog-friendly offices.

Diversity Statement

At Seven Education, we believe that diversity drives innovation and inclusion strengthens collaboration.

We welcome people of all backgrounds, identities, and perspectives, because transforming education for a better tomorrow starts with equal opportunities today. If you’re excited about this role but don’t meet every requirement, we’d still love to hear from you.

Your contact

Maren Besand – Senior Talent Acquisition Manager
Wir freuen uns darauf, dich kennenzulernen! Der beste Weg für deine Bewerbung ist über unser Karriereportal.