Information Security Manager

develop; Berlin; Hybrid; EUR 80.000 - 100.000; Vollzeit

Zusammenfassung

Meditech Scale-up in Berlin seeks an Information Security Manager to own compliance and information security across product and operations, lead ISO 27001 initiatives, and translate regulatory needs into actionable software requirements with engineering teams.

You will drive audits, maintain security frameworks, and partner with engineering to ensure secure, compliant product development in a fast-growing medtech environment with hybrid work.

Qualifikationen

• Proven experience leading ISO 27001 certification.
• Hands-on compliance responsibility within an ISO 27001 ISMS.
• Fluency in German and English.
• Strong experience working closely with software engineering teams.

Aufgaben

• Own and drive compliance and information security across product and operations.
• Lead security certification projects end-to-end, including audit preparation and execution.
• Define, implement, and continuously improve policies, processes, and technical requirements.
• Translate regulatory needs into actionable software requirements with engineering teams.

Kenntnisse

ISO 27001

German language

English language

Software engineering collaboration

Jobbeschreibung

Information Security Manager | Meditech Scale-up | Berlin | Hybrid (3 days onsite) | €80,000-€100,000

About the Role

• Own and drive compliance and information security across product and operations
• Lead the company through security certification and ongoing audit processes
• Define, implement, and continuously improve policies, processes, and technical requirements
• Translate regulatory needs into actionable software requirements with engineering teams

Key Responsibilities

• Build and maintain compliance frameworks aligned with ISO 27001, GDPR, and medical device standards
• Lead security certification projects end-to-end, including audit preparation and execution
• Ensure continuous compliance across development and business processes
• Partner closely with engineering to guide secure and compliant product development

Your Profile - Must Have

• Proven experience leading a company through ISO 27001 or similar security certification
• Hands-on compliance responsibility within an ISO 27001 ISMS
• Fluency in German and English
• Strong experience working closely with software engineering teams

Nice-to-Have

• Experience with GDPR, ISO 13485, IEC 62304, MDR, DiGAV, or similar frameworks
• Background in medtech, healthtech, or regulated SaaS environments
• Experience managing audits, external assessors, and certification bodies
• High motivation for continuous improvement and ownership

Why Join?

• Build something meaningful with real-world impact
• Take ownership in a fast-growing meditech scale-up
• Enjoy flexible working hours and hybrid work in Berlin
• Be part of a collaborative, learning-driven culture