Principal Information Security Manager – remote working within Germany

Responsibilities

We are representing a confidential SaaS organization in their search for a Principal Information Security Manager to work remotely within Germany. This role sits at the center of the InfoSec function, coordinating across teams, owning key outcomes, and serving as the primary representative to customers and auditors.

You will act as the senior deputy for Information Security, reporting directly to senior operations leadership and working closely with Legal, Procurement, Engineering, external auditors, and enterprise customers.

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end including preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it remains current as the business evolves
• Prepare the InfoSec program for investor and M&A due diligence scrutiny

Customer Trust

• Own responses to enterprise customer security questionnaires and RFPs
• Represent the organization credibly in customer security reviews, calls, and audits
• Build scalable approaches through automation, templates, and knowledge bases to reduce response time without sacrificing quality

Risk & Vendor Security

• Maintain the risk register and drive risk treatment decisions with relevant stakeholders
• Own vendor security assessments for critical and high-risk suppliers
• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

• Own the internal security policy framework, keeping it current, understandable, and enforced
• Design and run security awareness programs that change behavior

Incident Response

• Own the incident response plan and lead execution when incidents occur
• Coordinate with Engineering, Legal, and leadership during incidents
• Drive post-incident reviews and close findings with owners

What We're Looking For

Essential Experience

• 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
• Proven ownership of ISO 27001 and/or SOC 2 programs
• Track record of representing InfoSec to enterprise customers, including security reviews and escalations
• Must be fluent in English
• Comfortable with AI-driven tooling and actively looking for automation opportunities in compliance and operations
• Ability to work remotely within Germany

Highly Desirable

• Experience supporting or preparing for M&A or investor due diligence processes
• Background working alongside Legal, Procurement, and Engineering
• Practical understanding of cloud security architecture
• Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent

You think in programs and systems rather than tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows and are empowered to drive that change. This is not a build-from-scratch role but rather a step up in maturity focused on reducing manual processes and sharpening governance.

How We Work With You

Our talent team at Get A Job.ai manages the full recruitment process for this confidential client. When you apply through our platform, a dedicated recruiter will screen your background and experience. If there's a strong match, we will submit your profile to the client for consideration and guide you through subsequent interview stages.

Please apply only through Get A Job.ai. Do not attempt to contact the client directly, as this may disqualify your application.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity

Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and work to ensure fair treatment throughout our recruitment process.