Principal Information Security Manager

Responsibilities

Our talent team is representing a confidential SaaS organization in their search for a Principal Information Security Manager based in Chemnitz, Sachsen. This is a senior operational role focused on maturing an established information security program to meet investor, audit, and enterprise customer requirements.

You will act as the senior deputy for information security, owning day-to-day operations and representing the function internally and externally. Reporting to senior business operations leadership, you will coordinate across Legal, Procurement, Engineering, external auditors, and enterprise customers.

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end including preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it stays current as the business evolves
• Prepare the information security program for investor and M&A due diligence scrutiny

Customer Trust

• Own responses to enterprise customer security questionnaires and RFPs
• Represent the organization credibly in customer security reviews, calls, and audits
• Build scalable approaches using automation, templates, and knowledge bases to reduce response time without sacrificing quality

Risk & Vendor Security

• Maintain the risk register and drive risk treatment decisions with relevant stakeholders
• Own vendor security assessments for critical and high-risk suppliers
• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

• Own the internal security policy framework, keeping it current, understandable, and enforced
• Design and run security awareness programs that change behaviour

Incident Response

• Own the incident response plan and lead execution when incidents occur
• Coordinate with Engineering, Legal, and leadership during incidents
• Drive post-incident reviews and close findings with owners

What We're Looking For

Essential Experience

• 5+ years of hands-on information security experience in a SaaS or B2B tech company
• Proven ownership of ISO 27001 and/or SOC 2 programs
• Track record of representing information security to enterprise customers, including security reviews and escalations
• Must be fluent in German and English
• Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations
• Think in programs and systems, not tasks; identify where manual effort can be replaced by tooling or AI-assisted workflows

Highly Desirable

• Experience supporting or preparing for M&A or investor due diligence processes
• Background working alongside Legal, Procurement, and Engineering teams
• Practical understanding of cloud security architecture
• Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team conducts an initial screening to understand your background and ensure alignment with the role requirements. We then submit qualified candidates to our client for consideration. Please do not contact the client organization directly—we manage all communication throughout the hiring process to ensure a professional and coordinated experience.

Pay

Compensation details will be discussed during the screening process with our talent team.

Equal Employment Opportunity

Get A Job.ai is committed to fair and equitable recruiting practices. We welcome applications from all qualified candidates regardless of background.