Head of Information Security (m / f / d)

Spryker; Berlin; Vor Ort; EUR 70.000 - 120.000; Vollzeit

Zusammenfassung

A leading company in cloud software is seeking an experienced Information Security Manager. The successful candidate will oversee information security strategy and operations, driving improvements and innovation while ensuring compliance with industry standards. This role requires deep expertise in information security, strong leadership skills, and the ability to navigate complex regulatory environments.

Qualifikationen

• 6+ years of experience in information and cyber security.
• Solid experience establishing an Information Security Management System.
• Business-level proficiency in English and German is mandatory.

Aufgaben

• Develop, maintain, and review information security architecture.
• Conduct risk assessments and manage security incidents.
• Create and update security policies and procedures.

Kenntnisse

Communication

Risk Management

Information Security Policies

Cloud Security

Compliance

Ausbildung

Degree in IT Security or related field

Tools

AWS

Jobbeschreibung

You'll be fully responsible for the Information Security area, from defining strategy to day-to-day operations, including :

• Developing, maintaining, and reviewing an information security architecture aligned with Spryker's strategies and goals while safeguarding digital assets.
• Conducting risk assessments and devising risk management strategies.
• Creating, updating, and maintaining security policies, procedures, and guidelines.
• Detecting and responding to security incidents and coordinating cross-functional teams to mitigate threats.
• Support various departments, particularly IT, with organizational and technical recommendations for enhancing information security.
• Driving continuous improvement and innovation in existing systems, processes, and procedures.
• Leading information security-related internal and external audits and projects.
• Promoting security awareness and individual responsibility throughout the organization.
• 6+ years of experience in information and cyber security, ideally in a similar international enterprise cloud software environment.
• Solid experience in establishing an Information Security Management System function.
• Knowledge of relevant regulations and standards in information security (e.g., ISO 27001, SOC-2, TISAX, BSI IT Grundschutz, CIS Controls, NIST, PCI-DSS).
• Expertise in cloud systems, preferably AWS.
• Relevant professional certifications include CISSP, CRISC, CISM, ITIL, CISA, or similar.
• A degree in IT security or a related field is advantageous.
• AWS certifications in IT security and Information Security are a plus.
• Pragmatic, proactive, and hands-on approach, with the drive to actively lead change.
• Intellectual curiosity about information security and staying abreast of industry and regulatory developments.
• Confidence and ability to collaborate across all hierarchical levels.
• Business-level proficiency in English and German is mandatory.