Information Security Manager

realworld-one; München; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

realworld one is seeking an Information Security Manager to own the company-wide security landscape, ensuring systems, products, and processes meet high security, reliability, and compliance standards.

You will collaborate with Engineering, Product, IT, and Leadership to embed security across development and operations, driving governance and practical security measures in a regulated environment.

Qualifications

• Degree or equivalent practical experience in a technical field.
• Broad understanding of cloud, app, and infra security with translating requirements into implementations.
• Experience in software-focused orgs requiring end-to-end ownership across security domains.
• Ability to operate as a high-impact individual contributor with ownership in ambiguity.

Responsabilités

• Own and evolve the company information security strategy in alignment with business and regulatory requirements.
• Strengthen and scale security structures, processes, and policies for a growing software organization.
• Act as ISO, owning ISMS and leading ISO 27001 and ISO 9001 compliance and audits.
• Balance governance with hands-on execution by implementing and monitoring security controls.
• Identify, assess, and mitigate security risks across product, data, and ops.
• Embed security best practices in development and operational processes with engineering/product efforts.
• Promote security awareness and accountability across the company.

Connaissances

Security strategy

Cloud security

Threat modeling

Governance

Stakeholder management

Communication with leadership

ISMS implementation

Formation

Bachelor's degree in CS/InfoSec

Outils

ISO 27001

ISO 9001

Description du poste

Position Summary

As Information Security Manager at realworld one, you will take ownership of our company-wide security landscape, ensuring that our systems, products, and processes meet the highest standards of security, reliability, and compliance in a regulated environment.

You will operate at the intersection of strategy and execution, maintaining and evolving our existing security structures while actively supporting the implementation of practical, scalable security measures across our organization.

Collaborating closely with Engineering, Product, IT, and Leadership, you will act as the central authority for all security-related topics, ensuring that our organization remains secure, compliant, and well-positioned for continued growth.

Responsibilities

• Own and continuously develop the company’s information security strategy, ensuring alignment with business objectives and regulatory requirements.
• Maintain, strengthen, and scale existing security structures, processes, and policies in a growing software organization.
• Act as Information Security Officer (ISO), owning the ISMS and leading ISO 27001 and ISO 9001 compliance and audits.
• Balance governance and hands‑on execution by actively supporting the implementation and monitoring of security controls across infrastructure, applications, and internal processes.
• Identify, assess, and mitigate security risks across the organization, including product security, data protection, and operational security.
• Collaborate closely with Engineering, Product, and IT to embed security best practices into development and operational processes.
• Drive company-wide security awareness and promote a strong culture of security and accountability.

Qualifications

• Degree in Computer Science, Information Security, IT, or a related technical field (or comparable practical experience).
• Broad technical understanding across cloud, application, and infrastructure security, with the ability to translate security requirements into practical implementations.
• Experience in software-centric organizations, ideally in small to mid-sized environments requiring end-to-end ownership across multiple security domains.
• Proven ability to operate as a high-impact individual contributor with strong ownership and autonomy in ambiguous, resource-constrained settings.
• Strong stakeholder management skills, with the ability to communicate effectively with both technical teams and senior leadership.
• Exposure to information security frameworks and standards (e.g., ISO 27001) with initial practical experience or strong interest in ISMS environments.