Principal Information Security Manager - remote working within Germany

Staffbase; Belgique; À distance; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Staffbase seeks a senior InfoSec leader within Finance & Operations to own day-to-day security functions, represent InfoSec internally and externally, and streamline governance with automation and templates.

You will report to the SVP Business Operations & Transformation, collaborating with Legal, Procurement, Engineering, auditors, and enterprise customers to strengthen security posture and trust.

Qualifications

• 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company.
• Proven ownership of ISO 27001 and/or SOC 2 programs.
• Track record of representing InfoSec to enterprise customers, including security reviews and escalations.
• Fluent in English.
• Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations.

Responsabilités

• Own the control framework and ensure it stays current as the business evolves.
• Prepare the InfoSec program for investor and M&A due diligence scrutiny.
• Own the incident response plan and lead execution when incidents occur.
• Coordinate with Engineering, Legal, and leadership during incidents.
• Drive post-incident reviews and close findings with owners.
• Own vendor security assessments for critical and high-risk suppliers.
• Partner with Procurement and Legal on AI-assisted review workflows.

Connaissances

InfoSec

SaaS security

SOC 2

ISO 27001

Security reviews

Fluent English

Automation opportunities

Outils

AI-driven tooling

Description du poste

About Staffbase

We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform . Our industry-leading and award-winning agentic AI communications channels - intranet, employee app and email solutions - create engaging experiences that connect and empower employees. Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis-St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience. We are proud to be a Unicorn company—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we're shaping the future of workplace communication. Our information security program is fit for purpose and operationally sound. The next chapter is about making it investor-ready, AI-efficient, and capable of sustaining enterprise customer trust at scale. This is not a build-from-scratch role. It is a step up in maturity: fewer manual processes and sharper governance.

What you’ll be doing

You will act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence.

You report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers.

• Own the control framework and ensure it stays current as the business evolves


• Prepare the InfoSec program for investor and M&A due diligence scrutiny


• Customer Trust


• Own the response to enterprise customer security questionnaires and RFPs


• Represent Staffbase credibly in customer security reviews, calls, and audits


• Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality


• Risk & Vendor Security Maintain the risk register and drive risk treatment decisions with relevant stakeholders


• Own vendor security assessments for critical and high-risk suppliers


• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

• Own the internal security policy framework, keep it current, understandable, and enforced


• Design and run security awareness programs that change behaviour, not just tick boxes

Incident Response

• Own the incident response plan and lead execution when incidents occur


• Coordinate with Engineering, Legal, and leadership during incidents


• Drive post-incident reviews and close findings with owners

What you need to be successful

• 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company


• Proven ownership of ISO 27001 and/or SOC 2 programs


• Track record of representing InfoSec to enterprise customers, including security reviews and escalations


• Must be fluent in English


• Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations

Highly Desirable Experience

• supporting or preparing for M&A or investor due diligence processes


• Background working alongside Legal, Procurement, and Engineering


• Practical understanding of cloud security architecture (enough to challenge and validate, not operate)