Principal Information Security Manager - remote working within Germany

Meyandy LLC; Chemnitz; Hybrid; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Staffbase is seeking a senior InfoSec lead within Finance & Ops to own the day-to-day information security program. You will coordinate with Legal, Procurement, Engineering and auditors, driving governance and tooling improvements.

You will lead ISO 27001 and SOC 2 audit cycles end-to-end, maintain the control framework, and prepare the program for investor scrutiny and potential M&A activity, ensuring trust across enterprise customers.

Qualifikationen

• Proven experience leading ISO 27001 and SOC 2 audit cycles end-to-end.
• Strong governance and risk management capabilities.
• Ability to collaborate with Legal, Procurement, Engineering and external auditors.

Aufgaben

• Act as senior deputy for InfoSec within Finance & Operations, owning day-to-day operations.
• Coordinate across teams, own outcomes and drive sharper governance.
• Prepare the InfoSec program for investor due diligence and potential M&A scrutiny.

Kenntnisse

ISO 27001 audits

SOC 2 audits

InfoSec governance

Cross-functional coordination

Jobbeschreibung

About Staffbase

We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry-leading and award-winning agentic AI communications channels - intranet, employee app and email solutions - create engaging experiences that connect and empower employees.

Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience.
We are proud to be aUnicorncompany—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.

Our information security program is fit for purpose and operationally sound. The next chapter is about making it investor-ready, AI-efficient, and capable of sustaining enterprise customer trust at scale.

This is not a build-from-scratch role. It is a step up in maturity: fewer manual processes and sharper governance.
The position sits at the center of the InfoSec team; you coordinate across teams, own outcomes and represent the function. You are comfortable being the person customers and auditors talk to.
You think in programs and systems, not tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows, and are empowered to drive that change as we build out our AI-driven operating model across the company.

What you’ll be doing

You will act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence.

You report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers.
You will own;

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it stays current as the business evolves
• Prepare the InfoSec program for investor and M&A due diligence scrutiny

Customer Trust