Information Security Manager

Tmoose; München; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

realworld one is seeking an Information Security Manager who will own the company-wide security landscape, ensuring systems, products, and processes meet top security and compliance standards in a regulated environment. You will work with Engineering, Product, IT, and Leadership to implement scalable security measures and maintain ISMS, ISO 27001 compliance, and audits.

This role blends strategy and hands-on execution, driving security awareness and embedding best practices across the

Qualifications

• Degree in Computer Science, Information Security, IT, or a related technical field.
• Broad technical understanding across cloud, application, and infrastructure security.
• Experience in software-centric organizations with end-to-end ownership across multiple security domains.
• Strong ownership, autonomy, and ability to operate in resource-constrained settings.
• Excellent stakeholder communication with technical teams and leadership.
• Exposure to ISO 27001 and ISMS environments.

Responsibilities

• Own and continuously develop the company’s information security strategy, ensuring alignment with business objectives and regulatory requirements.
• Maintain, strengthen, and scale existing security structures, processes, and policies in a growing software organization.
• Act as Information Security Officer (ISO), owning the ISMS and leading ISO 27001 and ISO 9001 compliance and audits.
• Balance governance and hands-on execution by actively supporting the implementation and monitoring of security controls across infrastructure, applications, and internal processes.
• Identify, assess, and mitigate security risks across the organization, including product security, data protection, and operational security.
• Collaborate closely with Engineering, Product, and IT to embed security best practices into development and operational processes.
• Drive company-wide security awareness and promote a strong culture of security and accountability.

Skills

Security leadership

ISO 27001

Cloud security

Application security

Infrastructure security

Stakeholder management

Education

Bachelor's degree in Computer Science, Information Security, IT, or related field

Job description

Position Summary

As Information Security Manager at realworld one, you will take ownership of our company-wide security landscape, ensuring that our systems, products, and processes meet the highest standards of security, reliability, and compliance in a regulated environment.

You will operate at the intersection of strategy and execution, maintaining and evolving our existing security structures while actively supporting the implementation of practical, scalable security measures across our organization.

Collaborating closely with Engineering, Product, IT, and Leadership, you will act as the central authority for all security-related topics, ensuring that our organization remains secure, compliant, and well-positioned for continued growth.

Responsibilities

• Own and continuously develop the company’s information security strategy, ensuring alignment with business objectives and regulatory requirements.
• Maintain, strengthen, and scale existing security structures, processes, and policies in a growing software organization.
• Act as Information Security Officer (ISO), owning the ISMS and leading ISO 27001 and ISO 9001 compliance and audits.
• Balance governance and hands-on execution by actively supporting the implementation and monitoring of security controls across infrastructure, applications, and internal processes.
• Identify, assess, and mitigate security risks across the organization, including product security, data protection, and operational security.
• Collaborate closely with Engineering, Product, and IT to embed security best practices into development and operational processes.
• Drive company-wide security awareness and promote a strong culture of security and accountability.

Qualifications

• Degree in Computer Science, Information Security, IT, or a related technical field (or comparable practical experience).
• Broad technical understanding across cloud, application, and infrastructure security, with the ability to translate security requirements into practical implementations.
• Experience in software-centric organizations, ideally in small to mid-sized environments requiring end-to-end ownership across multiple security domains.
• Proven ability to operate as a high-impact individual contributor with strong ownership and autonomy in ambiguous, resource-constrained settings.
• Strong stakeholder management skills, with the ability to communicate effectively with both technical teams and senior leadership.
• Exposure to information security frameworks and standards (e.g., ISO 27001) with initial practical experience or strong interest in ISMS environments.