IT Security & Compliance Lead | HealthTech (w/m/d)

About This Opportunity

We are representing a confidential HealthTech organization in Berlin that requires an experienced IT Security & Compliance Lead to own their entire security posture end-to-end. This is not a documentation-only role—you will build and harden cloud infrastructure, lead ISO 27001 and BSI-C5 audits independently, and embed DevSecOps practices into the development lifecycle using hands-on tools like Terraform, AWS, and GCP.

Our client is a small, fast-moving team where you will work directly with technical leadership and have genuine ownership over security architecture, cloud environments, and compliance frameworks. This role offers equity participation, flexible working arrangements including a 32-hour week option, and the chance to shape security practices from the ground up in a regulated healthcare technology environment.

Location: Berlin, Germany – Hybrid working
Employment Type: Permanent, full-time (32-hour week option available)
Language Requirements: Fluent German and English (C1 level)

Responsibilities

• Own security and compliance end-to-end across cloud infrastructure, product security, and internal IT systems
• Harden and operate AWS/GCP environments including IAM, network architecture, encryption, logging, monitoring, and threat detection
• Embed DevSecOps practices into the software development lifecycle through threat modeling, vulnerability management, and secure code reviews
• Lead ISO 27001 and BSI-C5 certification processes including audits, evidence management, and risk assessments
• Coordinate penetration tests, security reviews, and vendor security assessments
• Define and maintain internal IT security baselines covering identity management, MDM, device policies, and onboarding/offboarding procedures
• Provide pragmatic security guidance to engineering teams and challenge architectural decisions when necessary

What We're Looking For

• Minimum 5 years of hands-on experience in cloud security (AWS or GCP) including Infrastructure as Code with Terraform
• Complete audit ownership experience with ISO 27001 and/or BSI-C5, including successful certification completion
• Demonstrated experience with DevSecOps, secure SDLC, threat modeling, and vulnerability management programs
• Fluent German and English language skills (C1 level minimum)
• Bachelor's degree or equivalent qualification
• Proven track record working collaboratively with engineering teams in small, agile environments
• Stable employment history with meaningful tenure in previous roles (minimum 2 years per position)
• Willingness to work on-site in Berlin as part of a hybrid arrangement

This role is not suitable for: freelancers seeking contract work, candidates with frequent job changes, policy-only backgrounds without technical implementation experience, or those without direct audit leadership experience.

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will conduct an initial screening to understand your cloud security experience, audit leadership background, and technical capabilities with Infrastructure as Code. Qualified candidates will then be presented to our client for consideration. Please do not attempt to contact the hiring organization directly—all communication and scheduling will be coordinated through Get A Job.ai to ensure a professional and confidential process.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Additional benefits through the client include: 4.5-day work week option, 28 days holiday, company car for private use, JobRad bicycle leasing, EGYM Wellpass, pension contributions, equity participation (VESOP), and team events.

Get A Job.ai is an equal opportunity recruiter. We welcome applications from all qualified candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or age.