Staff Information Security Manager (f/m/d)

WebHosting; Berlin; Hybrid; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

IONOS in Berlin is seeking a Staff Information Security Manager to translate security requirements into resilient technical concepts and ensure their effective implementation. You will drive Secure SDLC, IAM, cryptography, and compliance across teams, coordinating with external auditors and shaping continuity and recovery testing.

This hybrid, full-time senior role offers impact across Europe with a focus on cloud security and architecture.

Qualifikationen

• Experience with Secure SDLC and security architecture.
• Knowledge of IAM, cryptography, and key management.
• Familiarity with ISO/IEC 27001, NIST CSF, and related standards.

Aufgaben

• Drive the evolution of the Secure SDLC with dev teams.
• Lead threat modeling and architecture reviews.
• Design IAM concepts and cryptographic baselines.
• Take charge of vulnerability and pentest management.
• Specify logging, monitoring and error handling requirements.
• Design and evaluate BC and disaster recovery tests.
• Automate compliance and evidence collection in CI/CD.
• Collaborate with external auditors.

Kenntnisse

Threat modeling

IAM concepts

Vulnerability management

Compliance knowledge

CI/CD integration

Cryptography basics

Audit coordination

Policy as Code

Security architecture

Tools

TLS/PKI

HSM

IAM tooling

CI/CD tooling

Jobbeschreibung

Staff Information Security Manager (f/m/d)

Hybrid Full-time Senior Security

Job Description

About IONOS

At IONOS, we don’t just manage servers – we shape the digital future for more than 6.2 million customers worldwide with our solutions. As Europe’s leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure – from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools.

What drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises. We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit.

Ready for your next step? Become part of IONOS and grow with us.

For us, security isn’t an afterthought or a checkbox exercise – it’s built right into our DNA. We integrate security exactly where it matters most: into our architectures, pipelines, and operational concepts. Compliance evidence is generated naturally from our day-to-day operations, not from stressful last-minute audit prep. We are looking for someone who can translate security requirements into resilient technical concepts and actively verify their effectiveness.

Tasks

• Drive the evolution of our Secure SDLC side-by-side with our dev teams.
• Lead Threat Modeling and architecture reviews – catching risks early in the design phase, not right before a release.
• Design robust IAM concepts (role models, permission logic, recertification) and define clear cryptographic standards and baselines.
• Take charge of vulnerability and pentest management: scanning, CVSS scoring, prioritizing, and tracking remediations.
• Specify requirements for logging, monitoring, and error handling, and review their implementation across the board.
• Design and evaluate technical Business Continuity (BC) and disaster recovery tests.
• Automate compliance and evidence collection directly within the teams’ CI/CD pipelines.
• Deep conceptual knowledge of IAM (Role/Permission models, SSO, Federation, PAM, recertification logic).
• Practical experience with applied cryptography (TLS, PKI, Key Management, HSM).
• Familiarity with major frameworks (ISO/IEC 27001 Annex A, BSI IT-Grundschutz, OWASP ASVS & Top 10, CIS Benchmarks, NIST CSF).
• Experience with Policy as Code and Continuous Compliance.
• An understanding of audit logic and how to collaborate smoothly with external auditors.

Application Note

We value diversity and welcome all applications – regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.