Information Security Manager (m/w/d) Cloud

Location: Berlin, Germany; hybrid working model

Company

hirify.global is a European provider of cloud infrastructure, cloud services, hosting, and digitalization solutions serving around six million customers across 18 markets.

What you will do

• Operate and advance the ISMS across its scope, control catalog, Statement of Applicability, and management review.
• Manage the complete risk lifecycle, maintain the central risk register, and coordinate ownership and treatment decisions.
• Own policy drafting, review, approval, communication, and formal exception workflows.
• Plan and support internal and external audits, including evidence collection, sampling reviews, and corrective-action tracking.
• Contribute to the certification roadmap, including expansion into international target markets, and establish audit-readiness routines across engineering, IT operations, and corporate units.
• Partner with Privacy, Legal, regulators, incident response teams, internal leaders, and external auditors on compliance posture and regulatory notifications.

Requirements

• Multiple years of practical experience with standardized information security management systems and cybersecurity attestations.
• Proven audit and compliance experience in at least two certified domains, such as ISO/IEC 27001, BSI IT-Grundschutz, BSI C5, or PCI DSS.
• Strong risk management methodology and the ability to translate technical concepts into business risk statements.
• Experience facilitating external audits and working with assessors.
• High editorial precision and the ability to draft clear, concise, and enforceable corporate policies.
• Experience partnering with technical engineering and cloud operations teams without creating administrative bottlenecks.
• Strong facilitation and stakeholder-management skills up to executive leadership.
• Business fluency in German at C2 level and English at minimum C1 level, in written and spoken communication.

Nice to have

• Familiarity with privacy information management frameworks such as ISO 27701.
• Knowledge of European regulatory standards including GDPR, NIS-2, or DORA.
• Experience with cross-framework control mapping and modern GRC automation tooling.

Culture & Benefits

• Hybrid working model with flexible trust-based working hours.
• Open structures, flat hierarchies, friendly working culture, and strong team spirit.
• Training and development opportunities, health and sports courses, and employee discounts.
• Modern offices with good transport connections; some locations offer subsidized canteens and free drinks.
• Employee events including summer and winter parties and workshops.

Hiring process

• Candidates must undergo a security check at the end of the application process; consent will be requested during the process.