Senior Information Security Manager - Product & Platform (f/m/d)

Applike Group

Hamburg

Hybrid

EUR 130,000 - 180,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Hybrid work model with 3 core office‑d

30 vacation days

3 weeks remote work per year

In-house gym

Employee Assistance Program (EAP)

Job summary

applike group is seeking a Senior Group Information Security Manager - Product & Platform in Hamburg. You will own the group ISMS and drive ISO/IEC 27001 readiness across product, platform, cloud, and data environments, coordinating with auditors and external stakeholders.

You will define security requirements for apps, APIs, and CI/CD, partner with Engineering for secure architectures, and lead incident response while ensuring governance and risk management across the business.

Qualifications

6+ years of experience in information security, product/application security, cloud security, or technology risk, including 2–3 years owning a security program, ISMS, or major ISO/IEC 27001 workstream.
Experience implementing or operating ISO/IEC 27001 controls in cloud-native or platform environments.
Technical depth across app security, secure development, APIs, cloud infra, CI/CD, vulnerability management, and incident response.

Responsibilities

Own the design, operation, and continual improvement of the group ISMS and ISO/IEC 27001 readiness across applications, platform, cloud, data, and products.
Lead external stakeholder management with auditors, certification bodies, authorities, customers, and partners.
Define security requirements for apps, APIs, CI/CD pipelines, and cloud infrastructure; collaborate with Engineering on secure architecture and remediation.
Maintain the group risk register, establish KPIs, and support leadership in risk-acceptance decisions.
Define security requirements for SSO, MFA, identity, and endpoint management; ensure audit readiness.
Lead incident response processes and run tabletop exercises to improve resilience.

Skills

Information security

Product security

Cloud security

Technology risk

ISO/IEC 27001

Audits & regulatory

German & English

Education

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

CISM

CISSP

CRISC

CCSP

CISA

Tools

N/A

Job description

Build the security foundation behind products used by hundreds of millions

At applike group, we build and scale innovative AdTech, mobile-gaming, analytics, and app-growth products used by millions worldwide. With 500+ colleagues across Hamburg, Boston, Tokyo, and Singapore, we are seeking a Senior Group Information Security Manager - Product & Platform to own our group-wide Information Security Management System (ISMS) and drive ISO/IEC 27001 readiness across our application, platform, cloud, data, and product-facing environments.

As a Senior Information Security Manager - Product & Platform, you will report directly to the Head of Legal. You will act as the internal security lead across our product landscape, defining security requirements, driving ISO readiness, and integrating workplace IT controls into one coherent ISMS.

You will lead communication with auditors, certification bodies, authorities, enterprise customers, and other external stakeholders, serving as the bridge between technical engineering, business leadership, and compliance.

What you will do:

Group ISMS & ISO/IEC 27001 Readiness: Own the design, operation, and continual improvement of the group ISMS. Define the ISO/IEC 27001 scope, risk methodology, and Statement of Applicability. Drive ISO readiness across application, platform, cloud, data, and product environments.

External Stakeholder Management: Lead all communication and management of external auditors, certification bodies, regulatory authorities, customers, and partner security reviews.

Product, Cloud & Platform Security: Define practical security requirements for apps, APIs, CI/CD pipelines, and cloud infrastructure. Partner with Engineering on secure architecture, vulnerability management, and penetration test remediation.

Security Governance & Risk: Maintain the group risk register, establish KPIs, and prepare management reviews to support leadership in risk-acceptance decisions.

Internal IT Oversight: Define security requirements for SSO, MFA, identity, and endpoint management (operated by Group IT), verifying evidence to maintain audit readiness.

Incident Response: Lead product and platform incident response processes, run tabletop exercises, and ensure continuous resilience improvement.

Who you are:

Experience: 6+ years of experience in information security, product/application security, cloud security, or technology risk-including at least 2-3 years owning a security program, ISMS, product-security domain, or major ISO/IEC 27001 workstream.

ISO 27001 Expertise: Practical experience implementing or materially operating ISO/IEC 27001 controls in a cloud-native or platform environment (not just supporting an audit). An ISO/IEC 27001 Lead Implementer or Lead Auditor certification is highly preferred.

Technical Depth: Deep working knowledge of application security, secure development, APIs, cloud infrastructure, CI/CD, vulnerability management, penetration testing, logging, incident response, and data protection.

Governance & IT Awareness: Working knowledge of identity, endpoint, SaaS, and workplace IT controls to define requirements and evaluate evidence without needing to operate them day-to-day.

Stakeholder & Communication Skills: Clear, confident communicator across all audiences-from engineers and C-level executives to external auditors and non-technical stakeholders.

Languages: Fluent in German and English

Certifications & Frameworks That Make You Stand Out:

Security Certifications: CISM, CISSP, CRISC, CCSP, CISA, or a comparable certification.

Framework Experience: Hands-on familiarity with SOC 2, BSI IT-Grundschutz, BSI C5, NIS2, or enterprise customer security reviews.

Domain Background: Experience in AdTech, mobile gaming, high-volume data platforms, or API-driven environments.

Fuel for the Journey: Benefits to Support Your Ambitions

Invest in Your Future: Regular feedback and our development program support your growth, helping you expand your skill set and achieve your career goals.

Easy Arrival to applike: From signing to settling in Hamburg, we've got you covered. Need a visa? No problem. Ready to build your new life and career at applike in Hamburg? We support every ambition - from learning German to a relocation bonus that helps you settle in and make Hamburg feel like home.

Live Your Best Life, at Work and Beyond: We work in a hybrid setup with 3 core office days, plus flexible working hours. Enjoy 30 vacation days, 3 weeks of remote work per year, and free access to an in-house gym with lots of different fitness classes and mental health support through our Employee Assistance Program (EAP).

Thrive Where You Work: Enjoy the Alster Lake view from our central office with top-notch equipment, fun open spaces, and a large variety of snacks and drinks.

Join the Community! Participate in regular team and company events, including hackathons and social gatherings. We work together, and we celebrate together, too.

The Interview Process: