Global Information Security Lead 100% (f/m/d)

Screening Eagle Technologies AG; Indiana (PA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive remuneration package

Team building events

Opportunities for professional development

Free car parking

Job summary

Screening Eagle Technologies AG is seeking a skilled information security professional to lead its security strategy and operations. Located in Indiana, USA, this role involves managing security alerts, overseeing compliance initiatives like ISO 27001, and engaging with clients on security issues. Ideal candidates will have 3-5 years of experience in information security, with a strong focus on cloud security and vulnerability management. The company offers competitive remuneration, professional development opportunities, and team building activities.

Qualifications

• 3 to 5 years of experience in information security.
• Hands-on technical work with incident monitoring and response.
• Experience with vulnerability management tools.

Responsibilities

• Monitor and triage security alerts and coordinate incident response.
• Manage vulnerability scanning and remediation.
• Maintain ISO 27001 certification and oversee audits.

Skills

Incident monitoring and response

Cloud security knowledge

Vulnerability management

Clear communication

Education

Relevant certifications (CISSP, CISM, etc.)

Tools

Security Information and Event Management (SIEM)

Endpoint Detection and Response (EDR)

Job description

Intro

Information security is central to earning the trust of our global customers and protecting the data that powers our AI‑driven products.

We’re looking for a pragmatic, hands‑on security professional to own our information security program. We value strong fundamentals and a willingness to grow and you should be confident in most of the below mentioned areas and motivated to pursue ongoing development.

This role directly reports to the CIO and carries ownership over security strategy, operations, and compliance across our international footprint.

What will you do

Security Operations:

• Monitoring and triaging security alerts, coordinating incident response, and seeing issues through to resolution
• Managing vulnerability scanning and remediation across endpoints, servers, networks, and applications
• Overseeing cloud security posture across AWS, Azure (and regional equivalents)
• Owning the security tooling stack: SIEM, EDR, email security, vulnerability scanning, WAF
• Guiding identity and access management practices, SSO, MFA, privileged access, joiner/mover/leaver processes, and periodic access reviews
• Providing architecture reviews and security guidance for new systems and infrastructure changes

Governance & Compliance:

• Maintaining and evolving our ISO 27001 certification
• Coordinating external audits and penetration tests
• Developing and maintaining security policies, standards, and operational playbooks
• Tracking risks and driving remediation across the organization
• Running security awareness training to build a strong security culture

Client & Stakeholder Engagement:

• Completing security questionnaires and vendor assessments for customers
• Supporting sales on security‑related RFPs and client conversations
• Communicating security updates, policy changes, and required actions clearly across all locations

What do we expect

• At least 3 to 5 years in information security with hands‑on technical work
• Solid incident monitoring and response experience and triaging alerts and managing incidents end‑to‑end
• Working knowledge of cloud security in at least one major platform (AWS, Azure, or GCP)
• Familiarity with ISO 27001 or SOC 2 programs
• Experience with vulnerability management and security monitoring tools
• Self‑starter mindset, comfortable working independently and driving initiatives
• Clear communicator who can translate security topics for IT, engineering, business, and customer audiences
• Comfortable to visit other locations once or twice per year
• Relevant certifications such as CISSP, CISM, or cloud security specialties is a plus
• Experience in multi‑site or multi‑region security is considered an advantage
• Background in SaaS, deeptech, or product‑led technology companies is beneficial
• Exposure to DevSecOps practices or infrastructure‑as‑code is considered a plus

Our offer

• Competitive remuneration package
• Team building events and company activities
• Opportunities for professional development
• Free car parking