Information Security Manager - SDLC / Compliance / DevSecOps (m/f/d) - Workwise GmbH in Frankfurt

Energy Jobline ZR; Frankfurt; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading cloud services provider in Frankfurt is seeking an Information Security Manager. In this role, you will manage security and compliance within the Product Development organization, enhance secure software practices, and engage in audits. The ideal candidate has in-depth knowledge of SDLC, security compliance frameworks like ISO 27001, and strong communication skills. The position offers a hybrid working model and numerous development opportunities.

Leistungen

Hybrid working model

Flexible working hours

Subsidised canteen

Employee discounts

Training and development opportunities

Health offers

Qualifikationen

• Strong understanding of Secure Software Development Lifecycle (SDLC).
• Proven experience with compliance frameworks like ISO 27001.
• Awareness of AI-specific security threats.

Aufgaben

• Own security and compliance topics within Product Development.
• Drive secure software development best practices.
• Champion security initiatives organization-wide.

Kenntnisse

Secure Software Development Lifecycle (SDLC)

Security compliance frameworks

DevSecOps practices

Communication skills

Analytical and problem-solving abilities

Jobbeschreibung

Job Description

Information Security Manager – SDLC / Compliance / DevSecOps (m/f/d) at IONOS SE, a leading cloud services and hosting platform of United Internet AG.

What can you expect?

• Own all security and compliance topics within the Product Development organization.
• Drive and monitor the adoption of secure software development best practices across the organization.
• Collaborate closely with Central Information Security to champion company‑wide security and compliance initiatives.
• Represent the Product Development team in internal and external audits and certifications.
• Proactively foster a security‑conscious mindset within the development organization by teaching and monitoring security best practices.

What should you bring along?

• A strong understanding of the Secure Software Development Lifecycle (SDLC), including threat modelling, secure coding standards, and proficiency with automated security analysis.
• Proven experience with security compliance frameworks and standards such as ISO 27001, BSI IT‑Grundschutz, or C5.
• Awareness of the emerging security landscape for artificial intelligence, including common AI‑specific threats and the securing of AI systems.
• Familiarity with modern DevSecOps practices, including operating software in container‑based cloud environments.
• Excellent communication and interpersonal skills, with the ability to explain complex security topics to both technical and non‑technical audiences.
• A proactive and results‑oriented mindset with strong analytical and problem‑solving abilities, and proven ability to drive security initiatives and influence change at a peer‑to‑peer level with engineering teams.

What do we offer?

• Hybrid working model.
• Flexible working hours through a trust‑based working model.
• Subsidised canteen and various free drinks at some locations.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.

To apply, use Workwise to submit your application within minutes – no cover letter required. We look forward to receiving your application.