Principal Information Security Manager

Responsibilities

We are representing a confidential SaaS organization in their search for a Principal Information Security Manager based in Berlin. This is a leadership role focused on advancing an existing information security program to the next level of maturity—making it investor-ready, operationally efficient, and capable of sustaining enterprise customer trust at scale.

You will serve as the senior deputy for information security, owning the function day-to-day and representing it both internally and externally. Reporting to senior operations leadership, you will collaborate closely with Legal, Procurement, Engineering, external auditors, and enterprise customers.

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end including preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it evolves with the business
• Prepare the information security program for investor and M&A due diligence scrutiny

Customer Trust

• Own responses to enterprise customer security questionnaires and RFPs
• Represent the organization credibly in customer security reviews, calls, and audits
• Build scalable approaches using automation, templates, and knowledge bases to reduce response time without sacrificing quality

Risk & Vendor Security

• Maintain the risk register and drive risk treatment decisions with relevant stakeholders
• Own vendor security assessments for critical and high-risk suppliers
• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

• Own the internal security policy framework, keeping it current, understandable, and enforced
• Design and run security awareness programs that drive behavioral change

Incident Response

• Own the incident response plan and lead execution when incidents occur
• Coordinate with Engineering, Legal, and leadership during security incidents
• Drive post-incident reviews and ensure findings are closed with appropriate owners

What We're Looking For

Essential Experience

• 5+ years of hands-on information security experience in a SaaS or B2B tech company
• Proven ownership of ISO 27001 and/or SOC 2 programs
• Track record of representing information security to enterprise customers, including security reviews and escalations
• Fluency in both German and English is required
• Comfortable with AI-driven tooling and actively seeks automation opportunities in compliance and operations
• Program and systems thinker who identifies where manual effort can be replaced by intelligent workflows

Highly Desirable

• Experience supporting or preparing for M&A or investor due diligence processes
• Background working alongside Legal, Procurement, and Engineering teams
• Practical understanding of cloud security architecture (sufficient to challenge and validate)
• Relevant certification such as CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will conduct an initial screening to understand your background and match it to our client's requirements. Once we mutually agree you're a strong fit, we will submit your profile to the client for consideration. Please do not contact the client directly—all communication and coordination will be managed through our recruiting team to ensure a professional and streamlined process.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Employment Opportunity

Get A Job.ai is committed to creating an inclusive recruitment process. We welcome applications from candidates of all backgrounds and experiences.