Cyber Security Manager

Stott and May; Frankfurt; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Talantir in Frankfurt is seeking a Senior Information Security Manager to design and implement an ISMS from the ground up, bridging policy and technical controls for a fast-growing software energy platform.

Reporting to the CISO, you will lead ISO 27001 and SOC 2 compliance, build BCM programs, govern security tooling decisions, and collaborate with engineering to scale secure solutions in a hybrid work setting.

Qualifications

• Proven track record of actually building an ISMS from scratch.
• Deep ISO 27001 knowledge with SOC 2 experience is ideal.
• Experience guiding greenfield security programs and audits.
• Ability to bridge policy with practical technical controls.

Responsibilities

• Own end-to-end ISMS design and rollout across business processes and tech stack.
• Lead ISO 27001 and SOC 2 compliance efforts for international scale.
• Design and implement BCM plans to ensure resilience.
• Provide governance on security tool requests and audits.
• Drive hands-on security controls with engineering teams.

Skills

ISMS design & implementation

ISO 27001 knowledge

SOC 2 compliance

Business Continuity Management

Auditing / audits

Security governance

Communication with stakeholders

Job description

Senior Information Security Manager

Location: Frankfurt, Germany (3 Days Office / 2 Days Remote)

Salary: €70,000 – €110,000

We are representing a software engineering company that build sophisticated solutions that optimise the flow of energy and materials, enabling global businesses to transition to a renewable and green future.

Currently going through an exciting technology transformation and scaling their operations, They need a Senior Information Security Manager who doesn't just know security theory but thrives in the execution.

Reporting directly to the CISO in a security team of 15, you will lead the charge in building security foundations from the ground up during a period of rapid greenfield development.

This isn't a maintenance role. You are being brought in to design and implement the ISMS from scratch. You will be the bridge between organisational policy and technical implementation, ensuring their security posture scales as fast as our investment.

Key Responsibilities

• Greenfield ISMS Implementation: Own the end-to-end design and practical rollout of Information Security Management System (ISMS), ensuring it is embedded into both business processes and technical stack.
• Compliance Leadership: Act as the subject matter expert for ISO 27001, with a secondary focus on achieving SOC 2 compliance to support their international scale.
• Business Continuity: Design and implement hands-on Business Continuity Management (BCM) plans that ensure their solutions remain resilient under any circumstances.
• Technical Governance: Review and approve security tool requests and conduct deep-dive customer audits to demonstrate a world-class security posture.
• Hands-on Security: Move beyond the conceptual. You will be responsible for the actual implementation of security controls, working closely with engineering teams to ensure they are technically sound and operationally effective.

Your Profile

• The Implementer: You have a proven track record of actually building an ISMS, not just managing one. You understand how to turn an ISO 27001 requirement into a working technical control.
• Expert Knowledge: Deep familiarity with ISO 27001 is essential. SOC 2 experience is a major bonus that will set you apart.
• Greenfield Mindset: You are energised by the opportunity to set the standard for a profitable, high-growth startup.
• Auditor & Analyst: You are comfortable facing customers in audits and analysing new tools for security risks.

Why Join Us?

• Impact: Your work directly supports the global shift to renewable energy.
• Profitable Growth: We are a stable, profitable business receiving significant investment, meaning we have the resources to do things right.
• Elite Mentorship: You will report directly to a highly experienced CISO who is committed to your development.
• Massive Training Budget: We don't just say we value growth; we fund it. You will have a dedicated budget for any certifications (CISSP, CISM, etc.) or technical training you require.
• Greenfield Freedom: No legacy red tape. You lead the aspects of the transformation that you design.