(Senior) Information Security Officer (German)

About This Opportunity

We are representing a confidential fintech organization seeking a highly skilled (Senior) Information Security Officer to join their team in Munich. This role is critical to maintaining customer trust, supporting sales engagements, and ensuring ongoing compliance with security standards including ISO 27001.

You will serve as a key technical and communication bridge between customers, auditors, internal teams, and security tooling. From managing security enquiries and RFPs to strengthening the ISMS and improving endpoint and access security, you will play a vital role in safeguarding the platform, data, and operations.

Fluent German is essential for this role due to regular engagement with German-speaking customers and regulators.

Responsibilities

• Respond to security questionnaires, RFPs, and due-diligence requests in collaboration with Sales and Pre-Sales teams
• Participate in customer calls to explain the organization's security posture and answer technical, compliance, and infrastructure-related questions
• Support the ongoing operation and improvement of the ISMS, ensuring alignment with ISO 27001 controls and underlying processes
• Assist in internal audits, evidence gathering, and risk assessments
• Maintain certification readiness by driving documentation, process adherence, and corrective actions
• Monitor the security posture of corporate tools, infrastructure, and integrations
• Support vendor assessments and due diligence for security-related tools
• Collaborate with Engineering, IT, and InfoSec teams to strengthen platform and enterprise security baselines
• Translate complex technical and security concepts into clear explanations for both technical and non-technical audiences
• Contribute to internal security awareness, documentation, and operational processes

What We're Looking For

Required:

• 5+ years of hands-on experience in Information Security, IT Security, or a related GRC role within a B2B tech or SaaS environment
• Proven experience operating and improving an ISMS aligned to ISO 27001, including policy development, risk assessments, internal audits, and certification maintenance
• Working knowledge of additional regulatory and compliance frameworks such as SOC 2, DORA, and NIS 2
• Solid understanding of IT security fundamentals: authentication, endpoint security, encryption, network basics
• Good technical competence across multiple operating systems (macOS, Windows, Linux)
• Experience coordinating with external auditors, certification bodies, and regulators
• Fluent German and English — mandatory due to regular engagement with German-speaking customers, auditors, and regulators
• Ability to articulate complex security and compliance topics clearly to diverse audiences
• Strong documentation skills with attention to accuracy, consistency, and audit-readiness

Highly Desirable:

• Relevant certifications (e.g., ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CRISC, CompTIA Security+)
• Experience with identity and access management tools (e.g., JumpCloud, Okta), MDM solutions, and enterprise security platforms
• Exposure to third-party risk management, vendor security assessments, or SaaS security tooling
• Experience supporting security questionnaires, RFPs, or due-diligence calls with regulated financial customers
• Familiarity with data protection requirements (GDPR) in a security context

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will conduct an initial screening to understand your background and ensure alignment with the role requirements. We then submit qualified candidates to our client for consideration. Please do not contact the client organization directly — all communication and coordination will be managed through Get A Job.ai to ensure a professional and streamlined process.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Opportunity: Get A Job.ai is committed to inclusive recruiting practices and equal employment opportunity. We welcome applications from all qualified candidates regardless of background.