Interim Head of Information Security

Jobgether; Deutschland; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

Jobgether is seeking an Interim Head of Information Security based in Germany to own the security strategy and strengthen the security posture of a software-driven organization. You will lead security across SDLC and platform operations, align with Engineering, IT, Legal and Compliance, and drive risk-based controls and audit readiness.

This 4–6 month engagement offers flexible working arrangements and a genuine opportunity to shape security practices and governance in a dynamic environment.

Qualifications

• 7+ years of professional information security experience.
• Degree in CS/IT/Cybersecurity or equivalent practical experience.
• Experience with software development organizations and modern applications/systems.
• Background in information security, ideally in cloud-based or SaaS environments.
• Familiarity with PCI-DSS and SOC 2 or comparable approaches.
• Experience with sensitive or payment-related data is a strong advantage.
• Exposure to AI-enabled environments is a plus.
• Strong technical foundations: APIs, IAM and vulnerabilities in distributed systems.
• Ability to engage confidently with engineering teams on architecture and security decisions.
• Experience assessing security tools and integrating logging, monitoring and threat detection.
• Previous experience leading or developing small teams.
• Strong ownership, accountability and a structured, transparent approach with measurable outcomes.
• Excellent communication and stakeholder-management skills.
• Collaborative mindset promoting security as a shared responsibility.
• Fluent written and spoken English; German is an advantage.

Responsibilities

• Own and continuously improve the organization’s overall information security posture with KPIs.
• Define and evolve the information security strategy in line with business priorities.
• Partner with Engineering to integrate security across the SDLC and platform operations.
• Establish pragmatic security standards, policies, and guardrails based on risk.
• Prepare for regulatory/audit requirements like PCI-DSS and SOC 2 with scalable controls.
• Strengthen threat detection and response via logging, monitoring and alerting.
• Evaluate and implement security technologies aligned with architecture and workflows.
• Advise stakeholders and represent the organization to customers, partners and auditors.
• Lead and develop a small team with accountability for security.

Skills

Information security

Security engineering

Cloud environments

PCI-DSS

SOC 2

AI security

Logging & monitoring

Threat detection

Leadership

Team leadership

English communication

Education

Degree in CS/IT/Cybersecurity

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Interim Head of Information Security based in Germany.

We are seeking an experienced information security leader to take ownership of a software-driven organization's security strategy and strengthen its overall security posture. In this interim role, you will work closely with Engineering, IT, Legal, and Compliance teams to embed security into development and platform operations. You will help advance a proactive, engineering-aligned security function built around secure-by-design principles, measurable risk management, and practical safeguards. You will also lead preparations for important compliance and audit requirements, including PCI-DSS and SOC 2. This is a temporary leadership opportunity offering flexibility in both scope and working arrangements, with the potential to make a meaningful impact over a 4-6 month engagement.

Accountabilities

• Own and continuously improve the organization’s overall information security posture, establishing clear and measurable KPIs to provide visibility into security risks and progress.

• Define and evolve the information security strategy in alignment with business priorities and the changing threat landscape.

• Partner with Engineering teams to integrate security throughout the software development lifecycle (SDLC) and platform operations, promoting secure-by-design practices.

• Establish pragmatic security standards, policies, and guardrails that provide teams with clear, risk-based guidance and support effective prioritization.

• Prepare the organization for regulatory and audit requirements, including PCI-DSS and SOC 2, by translating compliance expectations into practical, scalable controls.

• Strengthen threat detection and response capabilities through effective logging, monitoring, and alerting across applications and infrastructure.

• Evaluate and implement security technologies that fit existing architecture and engineering workflows, contributing to build-versus-buy decisions.

• Advise internal stakeholders on security matters and represent the organization in relevant discussions with customers, partners, and auditors.

• Lead and support a small team while fostering accountability and a shared responsibility for security.

Requirements

• At least 7 years of professional experience in Information Security, Security Engineering, or a closely related field.

• A degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.

• Experience working with software development organizations and a strong understanding of how modern applications and platforms are built, deployed, and operated.

• A proven background in information security or security engineering, ideally in cloud-based or SaaS environments.

• Familiarity with security standards and frameworks such as PCI-DSS and SOC 2, or comparable compliance approaches.

• Experience working with sensitive or payment-related data is a strong advantage.

• Exposure to security considerations in AI-enabled environments is a plus.

• Strong technical foundations, including knowledge of modern application architectures, APIs, identity and access management, and common vulnerabilities in distributed systems.

• Ability to engage confidently with engineering teams on architecture and security decisions.

• Experience assessing security tools and integrating logging, monitoring, and threat detection into development and operational workflows.

• Previous experience leading or developing small teams.

• Strong ownership, accountability, and a structured, transparent approach focused on measurable outcomes.

• Excellent communication and stakeholder-management skills, with the ability to build trust across technical and non-technical teams.

• A collaborative mindset that encourages constructive dialogue and promotes security as a shared responsibility.

• Fluent written and spoken English is required; German language skills are an advantage.

Benefits

• Flexible working arrangements, including remote, office-based, or hybrid options.

• Competitive salary and compensation package.

• Personalized career growth opportunities.

• Professional development resources, including mentorship, technical talks, training, and centers of excellence.

• Active technical communities and regular knowledge-sharing opportunities.

• Education reimbursement.

• Anniversary gifts and recognition.

• Corporate events and team-building activities.

• Additional benefits depending on location.