Information Security Lead (m/f/d)

TeleClinic; München; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Urban Sports Club

LinkedIn Learning / Reforge

Jobrad & Finn.auto mobility discounts

Company pension scheme

30 days vacation

Corporate Benefits discounts

Employee stock options

Personal development budget

Zusammenfassung

TeleClinic, Germany's leading telemedicine platform, is seeking a hands-on Senior Backend Engineer who will also own the information security strategy as de facto CISO. You will design scalable backend services in Python/Django, drive ISO 27001 certification, and shape the ISMS.

This role collaborates across product, operations, and leadership. You will lead risk assessments, implement security policies, and build secure cloud-native systems in a regulated healthcare environment.

Qualifikationen

• 5+ years of Python backend development experience.
• Solid understanding of network security, IAM, encryption, and secure SDLC.
• Hands-on ISO 27001 experience (leading or significant contribution).
• Familiarity with healthcare data regulations (GDPR, HIPAA, or German DiGA).
• Strong communication to explain security concepts to non-technical stakeholders.
• Experience with cloud infrastructure and modern DevSecOps practices.
• Fluent in English; German is a plus.

Aufgaben

• Collaborate with product and infrastructure on security-first architecture decisions.
• Design, build, and maintain scalable, secure backend services and APIs in Python/Django.
• Own and drive TeleClinic's ISO 27001 certification and ongoing compliance.
• Develop, maintain, and enforce the ISMS across the company.
• Define and implement security policies, standards, and procedures.
• Lead risk assessments, threat modelling, and vulnerability management.
• Educate and upskill colleagues on security best practices.
• Monitor threat landscape and address emerging risks in healthcare.

Kenntnisse

Python backend

Security awareness

ISO 27001

GDPR / HIPAA awareness

Cloud / DevSecOps

English proficiency

Strong communicator

Security policy design

Tools

AWS / GCP / Azure

Jobbeschreibung

We want to enable the access to digital medical consultation for everyone in Germany. Really for everyone! To reach that, we are building the leading on-demand platform for telemedicine. And your impact matters.

Are you seeking more than just a job, but a meaningful mission that fills you with pride? Welcome! We are TeleClinic, Germany's leading telemedicine platform.

Digitalisation of the German healthcare system is currently taking off and we offer some seats to join us on this revolutionary journey. Join TeleClinic and play a pivotal role in shaping a healthier society.

This is a unique hybrid position sitting within our Infrastructure team. You'll contribute as a hands-on Senior backend Engineer while simultaneously taking ownership of our information security strategy, acting as our de facto CISO. You'll be the go-to person for all security-related topics, bridging the gap between engineering, operations, and leadership. If you love building resilient systems and want your security work to have real company-wide impact, this role is for you.

What You'll Do

• Collaborate with product teams and infrastructure on architecture decisions with a security-first mindset.
• Design, build, and maintain scalable, secure backend services and APIs in Python / Django.
• Own and drive TeleClinic's ISO 27001 certification and ongoing compliance, from gap analysis through to audit readiness.
• Develop, maintain, and enforce the company-wide Information Security Management System (ISMS).
• Define and implement security policies, standards, and procedures across and with all teams.
• Lead risk assessments, threat modelling, and vulnerability management.
• Educate and upskill colleagues on security awareness and best practices.
• Monitor the threat landscape and proactively address emerging risks relevant to a regulated healthcare environment.

What You Bring

• 5+ years of Python backend engineering experience.
• Solid understanding of network security, identity & access management, encryption, and secure SDLC.
• Hands-on experience with ISO 27001, ideally having led or significantly contributed to an implementation or re-certification.
• Familiarity with healthcare data regulations (GDPR, potentially HIPAA, or German digital health regulations such as DiGA) is a strong plus.
• Strong communicator who can translate complex security concepts to non-technical stakeholders.
• Proven track record with cloud infrastructure (AWS, GCP, or Azure) and modern DevSecOps practices is a plus.
• Fluent in English; German is a plus.

Our salaries are determined based on objective and role-related criteria, aligned with the local market standards of your specific hiring country. Your dedicated recruiter will be happy to provide detailed information about the relevant salary bands prior to your first interview.

Enjoy great benefits

Please note that due to various partnership or legal agreements, some benefits may not be available outside of Germany.

• Urban Sports Club Membership Discount
• Access to eLearning platforms such as LinkedIn Learning or Reforge
• Mobility discounts: Jobrad & Finn.auto
• Company pension scheme with attractive employer contributions
• 30 days vacation per year
• Shopping discounts through Corporate Benefits
• Opportunity to participate in the employee participation program (stock options)
• Up to 1.000€ in personal development budget & 2 days off for personal development