Principal Information Security Manager

Responsibilities

We are representing a confidential SaaS organization seeking a Principal Information Security Manager to elevate their established security program. You will act as the senior deputy for InfoSec, owning day-to-day operations and representing the function internally and externally.

You will report to senior business operations leadership and work closely with Legal, Procurement, Engineering, external auditors, and enterprise customers.

Compliance & Audit

• Lead ISO 27001 and SOC 2 audit cycles end-to-end including preparation, evidence collection, auditor management, and findings remediation
• Own the control framework and ensure it remains current as the business evolves
• Prepare the InfoSec program for investor and M&A due diligence scrutiny

Customer Trust

• Own responses to enterprise customer security questionnaires and RFPs
• Represent the organization credibly in customer security reviews, calls, and audits
• Build scalable approaches through automation, templates, and knowledge bases to reduce response time without sacrificing quality

Risk & Vendor Security

• Maintain the risk register and drive risk treatment decisions with relevant stakeholders
• Own vendor security assessments for critical and high-risk suppliers
• Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

• Own the internal security policy framework, keeping it current, understandable, and enforced
• Design and run security awareness programs that change behavior

Incident Response

• Own the incident response plan and lead execution when incidents occur
• Coordinate with Engineering, Legal, and leadership during incidents
• Drive post-incident reviews and close findings with owners

What We're Looking For

Essential Experience

• 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
• Proven ownership of ISO 27001 and/or SOC 2 programs
• Track record of representing InfoSec to enterprise customers, including security reviews and escalations
• Must be fluent in German and English
• Comfortable with AI-driven tooling; actively seeks automation opportunities in compliance and operations
• Think in programs and systems, not tasks

Highly Desirable

• Experience supporting or preparing for M&A or investor due diligence processes
• Background working alongside Legal, Procurement, and Engineering
• Practical understanding of cloud security architecture
• Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent

How We Work With You

Our talent team at Get A Job.ai has partnered with this organization to identify exceptional InfoSec leaders. When you apply through getajob.ai, a dedicated recruiter will screen your profile and experience. If there's a strong match, we will submit you directly to our client for consideration. Please do not contact the client directly—we manage the entire introduction and interview coordination process on your behalf.

Pay

Compensation details will be discussed during the screening process.

Equal Employment Opportunity

Get A Job.ai is committed to inclusive hiring practices and provides equal employment opportunity to all qualified candidates regardless of race, color, religion, gender, sexual orientation, national origin, age, disability, or veteran status.