Information Security Manager - Product Development (f/m/d)

Stryker Corporation; Karlsruhe; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading cloud service provider in Germany is seeking an experienced Information Security Manager to manage security processes and ensure compliance with standards like ISO 27001. The role involves leading security initiatives, driving best practices, and collaborating closely with central information security teams. The ideal candidate will have strong expertise in secure software development and a proactive attitude towards promoting security culture in development.

Leistungen

Hybrid working model

Flexible working hours

Subsidized canteen

Various employee discounts

Employee events

Training and development opportunities

Health offers like sports courses

Qualifikationen

• Strong understanding of secure coding standards and threat modeling.
• Proven experience with security compliance frameworks.
• Keen awareness of AI-specific threats.
• Familiarity with DevSecOps practices.

Aufgaben

• Own all security and compliance topics within the Product Development.
• Drive and monitor secure software development best practices.
• Collaborate with Central Information Security.

Kenntnisse

Secure Software Development Lifecycle (SDLC)

Security compliance frameworks (ISO 27001, BSI IT-Grundschutz, C5)

Emerging AI security threats

DevSecOps practices

Communication skills

Problem-solving

Leadership

Jobbeschreibung

IONOS, the leading European provider of cloud infrastructure, cloud services and hosting services, you will work together with a wide range of teams. We are characterized by open structures, a friendly working culture and flat hierarchies with a strong team spirit. We firmly believe that work and fun are compatible, and offer you the right environment for this. Our constant growth means that we are always looking for new colleagues. Become part of IONOS and grow with us.

Tasks

Are you a seasoned security professional with a passion for building secure software? Do you thrive on the challenge of protecting digital products from evolving threats? If so, we have an exciting opportunity for you to join our team at IONOS.

As an Information Security Manager, you will be responsible for ensuring our product development organization has the correct processes for developing, maintaining, and operating secure software. You will be a key player in ensuring our products and processes meet critical compliance requirements, including GDPR, and will prepare the organization for successful external audits and certifications like ISO 27001, BSI IT-Grundschutz, and C5.

This is a high-impact role where you will work directly with the Head of Product Development to own and drive all security and compliance topics within the organization.

• Lead Security Initiatives: Own all security and compliance topics within the IONOS Product Development organization.
• Drive Secure Practices: Drive and monitor the adoption of secure software development best practices across the organization.
• Collaborate: Closely collaborate with Central Information Security to champion company-wide security and compliance initiatives.
• Represent IONOS: Competently and securely represent IONOS Product Development in internal and external audits and certifications.
• Promote Security Culture: Proactively foster a security-conscious mindset within the development organization by teaching and monitoring security best practices.

Qualifications

• Secure Development Expertise: A strong understanding of the Secure Software Development Lifecycle (SDLC), including threat modeling, secure coding standards (vulnerability prevention), and proficiency with automated security analysis that involves scanning both source code and live applications for vulnerabilities.
• Compliance & Audits: Proven experience with security compliance frameworks and standards such as ISO 27001, BSI IT-Grundschutz, or C5.
• AI Security: A keen awareness of the emerging security landscape for artificial intelligence, including an understanding of common AI-specific threats and familiarity with the principles of securing AI systems throughout their development lifecycle.
• DevSecOps: Familiarity with modern DevSecOps practices, including operating software in container-based cloud environments.
• Communication Skills: Excellent communication and interpersonal skills, with the ability to explain complex security topics to both technical and non-technical audiences.
• Problem-Solving: A proactive and results-oriented mindset with strong analytical and problem-solving abilities.
• Leadership: Proven ability to drive security initiatives and influence change at a peer-to-peer level with engineering teams.

If you\'re ready to make a significant impact and help us build a more secure future, we\'d love to hear from you.

Benefits

• Hybrid working model.
• Flexible working hours through trust-based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.

About IONOS

IONOS is the leading European digitalization partner for small and medium-sized businesses (SMB). The company serves around six million customers and operates across 18 markets in Europe and North America, with its services being accessible worldwide. With its Web Presence & Productivity portfolio, IONOS acts as a \"one-stop shop\" for all digitalization needs: from domains and web hosting to classic website builders and do-it-yourself solutions, from e-commerce to online marketing tools. In addition, the company offers Cloud Solutions to enterprises who are looking to move to the cloud as their businesses evolve.

We value diversity and welcome all applications - regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.