Назад
Company hidden
9 часов назад

Principal Information Security Manager (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
Germany
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Principal Information Security Manager (Cybersecurity): Managing the information security program for an AI-native employee experience platform with an accent on investor readiness, AI-driven efficiency, and enterprise customer trust. Focus on scaling compliance frameworks, leading audit cycles, and automating security workflows to reduce friction.

Location: Hybrid in Chemnitz, Berlin, or Dresden, Germany

Company

hirify.global is a Unicorn company providing an AI-native Employee Experience Platform that helps organizations unlock the power of inspirational communication.

What you will do

  • Lead ISO 27001 and SOC 2 audit cycles end-to-end, including evidence collection and findings remediation.
  • Manage responses to enterprise customer security questionnaires and RFPs, representing the company in security reviews.
  • Maintain the risk register and perform vendor security assessments for high-risk suppliers.
  • Own and enforce the internal security policy framework and design behavioral security awareness programs.
  • Execute the incident response plan and lead coordination between Engineering, Legal, and leadership.
  • Implement AI-assisted review workflows and automate manual compliance processes.

Requirements

  • 5+ years of hands-on InfoSec experience within a SaaS or B2B tech environment.
  • Proven track record of owning ISO 27001 and/or SOC 2 programs.
  • Fluent in both German and English.
  • Experience handling security reviews and escalations with enterprise customers.
  • Must be based in or able to work hybrid in Germany (Chemnitz, Berlin, or Dresden).

Nice to have

  • Experience supporting M&A or investor due diligence processes.
  • Relevant certifications such as CISM, CISSP, or ISO 27001 Lead Auditor/Implementer.
  • Practical understanding of cloud security architecture.
  • Background working closely with Legal, Procurement, and Engineering teams.

Culture & Benefits

  • Competitive salary packages including a unit-based Long Term Incentive Plan (LTIP).
  • Flexible working models with a yearly flex work allowance of €1560.
  • 31 vacation days annually, including fully paid Fridays off during August.
  • Company pension scheme.
  • One paid Volunteers Day per year for social projects.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →