Staff Information Security Manager (f/m/d) (Cloud Security)

Location: Berlin, Germany; hybrid working model with a home office option

Company

hirify.global provides cloud infrastructure, cloud services, hosting, and digitalization solutions for small and medium-sized businesses and enterprise customers across Europe and North America.

What you will do

• Drive the evolution of the Secure SDLC in collaboration with development teams.
• Lead threat modeling and architecture reviews to identify risks during the design phase.
• Design IAM concepts, including role models, permission logic, recertification, and cryptographic standards.
• Manage vulnerability scanning, CVSS scoring, prioritization, penetration testing, and remediation tracking.
• Define requirements for logging, monitoring, error handling, business continuity, and disaster recovery testing.
• Automate compliance and evidence collection within CI/CD pipelines.

Requirements

• Several years of practical experience with standardized management systems, cybersecurity certifications, and attestations.
• Practical experience with at least two certified scopes involving ISO 27001, IT-Grundschutz, or BSI C5.
• Several years of experience applying security standards and certifications in a technical product organization.
• Strong interest in tool-supported integration of management systems and certification activities into daily operations.
• Confident communication and goal-oriented collaboration with international and internal stakeholders.
• English at CEFR C1 or higher and German at CEFR C1 are required.

Nice to have

• Deep conceptual knowledge of IAM, SSO, federation, PAM, and recertification logic.
• Practical experience with applied cryptography, including TLS, PKI, key management, and HSM.
• Familiarity with ISO/IEC 27001 Annex A, BSI IT-Grundschutz, OWASP ASVS and Top 10, CIS Benchmarks, and NIST CSF.
• Experience with Policy as Code, continuous compliance, audit logic, and external auditors.

Culture & Benefits

• Hybrid work with a home office option and trust-based flexible working hours.
• Modern office with convenient transport connections.
• Training and professional development opportunities.
• Health programs, sports and health courses, employee discounts, and company events.
• Subsidized canteen and free drinks at some locations.