Security and Compliance Lead

Black Forest Labs Inc.; Freiburg im Breisgau; Vor Ort; EUR 80.000 - 120.000; Vollzeit

Zusammenfassung

A cutting-edge startup in Freiburg im Breisgau is looking for a security and compliance leader to develop its security strategy and manage compliance programs. You'll have a critical role in ensuring regulatory compliance and enhancing security across all operations, particularly in Kubernetes environments. The ideal candidate has 5+ years of experience and a strong background in security roles, compliance certifications, and communication skills.

Qualifikationen

• 5+ years of experience in security roles.
• Deep understanding of infrastructure, application, and cloud security.
• Track record of managing compliance certifications.

Aufgaben

• Own and evolve the company-wide security strategy.
• Lead global compliance programs ensuring regulatory requirements.
• Establish security as a competitive advantage.

Kenntnisse

Infrastructure security

Application security

Cloud security

Compliance management

Kubernetes security

Communication skills

Tools

Azure

Jobbeschreibung

Overview

Black Forest Labs is a cutting-edge startup pioneering generative image and video models. Our team, which invented Stable Diffusion, Stable Video Diffusion, and FLUX.1, is currently seeking a strong security and compliance leader to work closely with our team in building and implementing world-class security and ensuring regulatory compliance across the business.

Responsibilities

• Own and evolve the company-wide security strategy across infrastructure, application, and corporate environments
• Lead our global compliance programs (e.g., ISO 27001, SOC 2) ensuring we meet regulatory and customer trust requirements. Build and maintain relationships with auditors, ensuring smooth audit processes
• Address AI-specific compliance requirements around data usage, model governance
• Build a comprehensive security program that scales with our AI training and inference infrastructure
• Partner closely with engineering and Devops to embed “secure by default” principles into our architecture and development lifecycle
• Protect inference infrastructure: model serving endpoints, API gateways, and production deployment pipelines
• Ensure secure model versioning, storage, and deployment practices
• Implement access controls and audit trails for sensitive training data and model weights
• Manage and scale our IT function, ensuring a secure, efficient, and user-friendly digital workplace
• Establish and maintain risk & governance structures, security policies, and incident response procedures
• Design and implement security controls for large-scale Kubernetes environments hosting training and inference workloads
• Lead internal risk assessments and external audits, and build trusted relationships with auditors and customers
• Create and optimise detections, playbooks, and workflows to quickly identify and respond to potential incidents
• Make impactful, risk-based security decisions aligned with business objectives
• Establish security as a competitive advantage while maintaining development velocity

Ideal Experience

• 5+ years of experience in security roles (Security Officer, Security Engineer, Compliance & Security Manager)
• Deep understanding of infrastructure security, application security, and cloud security
• Experience performing security operations or investigations involving large-scale Kubernetes environments
• Track record of successfully managing compliance certifications (SOC 2, ISO 27001, etc.)
• Exceptional communication and collaboration skills
• An ability to lead projects with little guidance
• Experience contributing to a high-growth startup environment
• Experience securing cloud infrastructure (Azure) at scale
• Experience with or strong interest in securing ML/AI infrastructure is highly valued

Application and Legal Notices

Voluntary self-identification and equal employment opportunity information collection is used for compliance purposes and is voluntary. Black Forest Labs is an equal opportunity employer and does not discriminate on the basis of any protected status under applicable law.