Information Security Manager

Digital Waffle; Berlin; Hybrid; EUR 85.000 - 100.000; Vollzeit

Zusammenfassung

Digital Waffle in Berlin seeks an Information Security Manager to own security, compliance and governance across the organisation and its software platforms. The role is hands-on with technical teams while driving policy, governance and regulatory initiatives at an organisational level.

As a senior contributor, you will shape security controls, lead ISO 27001 aligned ISMS activities and partner with cross-functional teams to ensure security supports product delivery without slowing it down.

Qualifikationen

• Experience owning documentation, controls and compliance in ISO 27001 environments.
• Proven experience collaborating with software engineering, product, or DevOps teams.
• Proven ability to write policies, procedures, governance artefacts.
• Strong information security principles, risk management and regulatory compliance.

Aufgaben

• Own and evolve the information security and compliance framework.
• Lead ISO 27001 aligned ISMS activities (documentation, controls, policies, risk management, audit readiness).
• Collaborate with engineering/DevOps to embed security into development processes.
• Translate regulatory and security requirements into practical controls.
• Drive continuous improvement of security, privacy and governance processes.
• Coordinate audits, evidence gathering, remediation, and stakeholder management.
• Develop and maintain technical and procedural documentation across the business.
• Partner with cross-functional teams to ensure security enables product delivery.

Kenntnisse

ISO 27001

Policy writing

Risk management

Security governance

Communication

German-English fluency

Jobbeschreibung

Information Security Manager Berlin, Germany (Hybrid - 2/3 days onsite)

€85,000 base salary with flexibility up to €100,000 for the right candidate

My client, an innovative and fast-growing digital technology business based in Berlin, is looking for an experienced Information Security Manager to take ownership of security, compliance, and governance across both the organisation and its software platforms.

This is a highly visible role sitting between engineering, operations, and leadership teams, focused on building scalable security and compliance processes within a modern software development environment. The position would suit someone who enjoys working hands-on with technical teams while also driving policy, governance, and regulatory initiatives at an organisational level.

Key Responsibilities

• Own and evolve the company's information security and compliance framework
• Lead and maintain ISO 27001 aligned ISMS activities, including documentation, controls, policies, risk management, and audit readiness
• Work closely with software engineering and DevOps teams to embed security and compliance requirements into development processes
• Translate regulatory and security requirements into practical technical and operational controls
• Drive continuous improvement across security, privacy, and governance processes
• Coordinate audits, evidence gathering, remediation activities, and stakeholder management
• Develop and maintain technical and procedural documentation across the business
• Partner with cross-functional teams to ensure security supports product delivery rather than slowing it down

Requirements

• Strong hands-on experience operating within an ISO 27001 environment, including ownership of documentation, controls, and compliance activities
• Experience working directly with software engineering, product, or DevOps teams in a technology-led business
• Proven background writing policies, procedures, technical documentation, and governance artefacts
• Strong understanding of information security principles, risk management, and operational compliance
• Ability to manage multiple projects and stakeholders in a fast-paced environment
• Excellent communication skills with the ability to engage both technical and non-technical audiences
• Fluent German and English language skills

Nice to Have

• Exposure to GDPR, medical device regulations, or regulated technology environments
• Experience within SaaS, digital health, fintech, or other highly regulated software businesses
• Background in security operations, DevSecOps, or cloud security environments