Principal Information Security Manager

Responsibilities

We are representing a confidential SaaS organization in their search for a Principal Information Security Manager to lead and scale their information security program. This is a remote opportunity based in Germany.

In this role, you will serve as the senior deputy for information security, owning day-to-day operations and representing the function both internally and externally. You will report directly to senior operations leadership and collaborate closely with Legal, Procurement, Engineering, external auditors, and enterprise customers.

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end including preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it remains current as the business evolves
• Prepare the information security program for investor and M&A due diligence scrutiny

Customer Trust

• Own responses to enterprise customer security questionnaires and RFPs
• Represent our client credibly in customer security reviews, calls, and audits
• Build scalable approaches including automation, templates, and knowledge bases to reduce response time while maintaining quality

Risk & Vendor Security

• Maintain the risk register and drive risk treatment decisions with relevant stakeholders
• Own vendor security assessments for critical and high-risk suppliers
• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

• Own the internal security policy framework, keeping it current, understandable, and enforced
• Design and run security awareness programs that change behavior

Incident Response

• Own the incident response plan and lead execution when incidents occur
• Coordinate with Engineering, Legal, and leadership during incidents
• Drive post-incident reviews and close findings with owners

What We're Looking For

Essential Experience

• 5+ years of hands-on information security experience in a SaaS or B2B tech company
• Proven ownership of ISO 27001 and/or SOC 2 programs
• Track record of representing information security to enterprise customers, including security reviews and escalations
• Must be fluent in both German and English
• Comfortable with AI-driven tooling and actively seeks automation opportunities in compliance and operations

Highly Desirable

• Experience supporting or preparing for M&A or investor due diligence processes
• Background working alongside Legal, Procurement, and Engineering teams
• Practical understanding of cloud security architecture
• Relevant certification such as CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent

You think in programs and systems rather than tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows and are empowered to drive that change. You are comfortable being the person customers and auditors talk to.

How We Work With You

Our talent team at Get A Job.ai will guide you through the entire process. When you apply through our platform, one of our recruiters will conduct an initial screening to understand your background and ensure alignment with the role requirements. Once we determine you're a strong match, we will submit your profile to our client for consideration.

Please apply exclusively through Get A Job.ai. Do not attempt to contact the client directly, as all applications must come through our official channel to be considered.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Get A Job.ai is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all candidates regardless of race, color, religion, sex, national origin, age, disability, or any other protected characteristic.