обновлено 6 дней назад
Head of Information Security (SaaS)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Head of Information Security (SaaS): Leading Cleverbridge’s information security strategy and strengthening security across software development, cloud platforms, and business operations with an accent on secure-by-design practices, risk management, and audit readiness. Focus on translating PCI-DSS and SOC 2 requirements into scalable controls, improving threat detection and response, and advising engineering, legal, compliance, customers, and auditors.
Location: Cologne, Germany; hybrid or fully remote options are available depending on the role and team.
Company
is a Merchant of Record that provides software sales infrastructure covering payments, subscriptions, taxes, compliance, onboarding, implementation, and customer lifecycle services.
What you will do
- Own and continuously improve the overall information security posture, including measurable security KPIs and transparent risk reporting.
- Define and evolve the security strategy in alignment with business objectives and the threat landscape.
- Partner with Engineering to integrate security into the SDLC and platform operations through secure-by-design principles.
- Establish pragmatic security standards, guardrails, and risk-based guidance for security initiatives.
- Prepare the organization for PCI-DSS and SOC 2 audits by translating requirements into practical, scalable controls.
- Strengthen logging, monitoring, alerting, threat detection, security tooling, and security-related stakeholder engagement.
Requirements
- 7+ years of relevant experience in Information Security or a related field.
- Degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
- Experience with software development organizations, modern application architectures, APIs, identity and access management, and distributed-system vulnerabilities.
- Background in Information Security or Security Engineering, ideally in cloud-based or SaaS environments.
- Familiarity with PCI-DSS, SOC 2, or comparable security standards and frameworks.
- Fluent English, written and spoken, is required. Experience leading and developing small teams is also required.
Nice to have
- Experience handling sensitive payment-related data.
- Exposure to security considerations in AI-enabled environments.
- German language skills.
Culture & Benefits
- Flexible hours with hybrid or fully remote work options, depending on the role and team.
- Modern offices in Cologne and Chicago.
- Gym reimbursement, wellness challenges, and other health benefits.
- Structured learning programs and a personal learning and development budget.
- 401(k), pension plans, volunteer time off, mentoring, and a referral bonus program.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →