Information Security Engineer

THRYVE; Deutschland; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote work within Germany

Workation (worldwide)

Overtime compensation

Training & development

Job summary

THRYVE, a German software and AI company, is seeking an Information Security Specialist focused on ISMS and AI governance. This full-time, 100% remote role within Germany offers ownership over information security, resilience and AI governance in a highly regulated environment.

You’ll work hands-on with engineering to translate security requirements into practical measures, shaping strategy, risk management and incident response while embedding security into software development and driving

Qualifications

• Experience in information security, IT risk or IT compliance.
• Knowledge of ISO 27001, BSI IT-Grundschutz or NIST.
• Technical understanding of software-development environments.
• Ideally, experience with DORA, CRA, BCM or financial-sector regulation.
• A pragmatic, proactive approach—you can protect the business without unnecessarily slowing it down.

Responsibilities

• Build and develop the ISMS in line with ISO 27001.
• Shape security strategy, governance and Business Continuity Management.
• Own ICT, information-security and AI risk management.
• Implement requirements including DORA and the CRA.
• Develop incident-response processes and support real incidents.
• Embed security into software-development processes.
• Prepare audits and drive resulting actions through to completion.
• Help define the company’s approach to secure and responsible AI.

Skills

Information security

IT risk

IT compliance

ISO 27001

DORA/CRA/BCM

Software development security

Job description

Information Security Specialist – ISMS & AI Governance | 100% remote within Germany | Full-time

Want to build an ISMS—not simply maintain one?

Join an established German software and AI company whose technology supports major organisations across the Sparkassen ecosystem. You’ll have real ownership over information security, resilience and AI governance within a highly regulated environment.

This is a hands‑on role where you’ll work directly with engineering teams and turn complex security requirements into measures that genuinely work.

Your impact

• Build and develop the ISMS in line with ISO 27001
• Shape security strategy, governance and Business Continuity Management
• Own ICT, information‑security and AI risk management
• Implement requirements including DORA and the CRA
• Develop incident‑response processes and support real incidents
• Embed security into software‑development processes
• Prepare audits and drive resulting actions through to completion
• Help define the company’s approach to secure and responsible AI

What you’ll bring

• Experience in information security, IT risk or IT compliance
• Knowledge of ISO 27001, BSI IT‑Grundschutz or NIST
• Technical understanding of software‑development environments
• Ideally, experience with DORA, CRA, BCM or financial‑sector regulation
• A pragmatic, proactive approach—you can protect the business without unnecessarily slowing it down

Why consider it?

• Genuine ownership rather than a purely advisory security role
• Direct influence over engineering, governance and business decisions
• Exposure to AI security and heavily regulated financial environments
• 100% remote working within Germany
• Flexible hours, 6 months workation (anywhere in the world) and paid or time‑compensated overtime
• Continuous training and development

If you want to shape security from strategy through to implementation, this is an opportunity to make a visible impact.