Principal of Information Security (f/m/d)

About This Opportunity

We are representing a confidential AI technology client in Munich who has recently achieved ISO 27001 certification and is entering a critical stabilization phase. This is a rare opportunity to join as the senior-most information security leader at a pivotal growth moment—controls are established, the external provider stack is being restructured, and a re-audit is on the horizon.

This Principal of Information Security role is for a hands-on security practitioner who thrives in ambiguity, makes high-stakes strategic decisions, and can execute operational work while orchestrating external partners. You'll own the information security function end-to-end with both strategic authority and operational accountability.

Responsibilities

Strategy & Program Ownership (≈ 40%)

• Lead the approach to the upcoming ISO 27001 re-audit—assess the situation, make strategic recommendations, and own execution
• Set and maintain the information security strategy aligned with enterprise customers and regulatory requirements
• Own the information security risk register end-to-end and conduct risk reviews with leadership
• Represent the organization externally with auditors, enterprise customer security teams, and regulators in a CISO capacity
• Advise leadership on information security risk in product, go-to-market, and expansion decisions

Hands-On Execution (≈ 40%)

• Own and continuously improve operational security processes including vendor risk management and control implementation
• Operationalize policies and controls—identify which are most material and ensure they translate from policy into practice
• Own the ISMS governance structure including control reviews, evidence collection, management reviews, and internal audits
• Lead incident response as incident commander for security-relevant events alongside the Security Engineering team
• Author clear policies, communications, and decisions for the security function

Orchestrating External Partners & Lateral Leadership (≈ 20%)

• Manage a deliberate external provider stack including audit preparation, data protection advisory, managed security services, penetration testing, and compliance platforms
• Collaborate closely with the Security Engineering team to connect governance and technical security
• Co-build a Security Ambassadors network across business teams
• Leverage AI and automation across the security program to maintain operational efficiency

What We're Looking For

Required Experience:

• Scale-up security leadership experience as the #1 or #2 information security compliance person at a company of 150–600 employees
• ISO 27001 lived experience—you've personally guided a company through a full ISO 27001 certification cycle
• Hands-on operator who has personally set up security processes and controls, not just overseen them
• Comfort operating as an individual contributor with lateral influence rather than hierarchical authority
• Demonstrated resilience in making difficult security decisions under time pressure and standing behind those decisions
• Excellent communication skills to translate security risk into business decisions for non-security executives and technical specifics for engineers

Preferred Qualifications:

• Experience navigating an ISO 27001 re-audit
• Familiarity with European regulatory landscape (GDPR, NIS2, EU AI Act) and US frameworks (SOC 2)
• Deep-tech, AI/ML, or industrial product security context—particularly with edge devices, hardware, or imaging data
• Experience working with and evaluating external security and compliance service providers
• Comfort using AI tools to improve efficiency while maintaining accountability for outputs

How We Work With You

Our talent team at Get A Job.ai carefully screens all candidates before presenting them to our client. When you apply through our platform, a recruiter will conduct an initial assessment to understand your background and fit for this role. If we determine there's a strong match, we'll submit your profile to the client and guide you through their interview process.

Important: Please do not attempt to contact the client directly. All communication and coordination will be managed through Get A Job.ai to ensure a professional and organized process for everyone involved.

Pay

Pay via Get A Job.ai: €120,000 – €135,000 base salary plus equity compensation valued at €120,000 – €180,000.

Additional benefits through the client include stock options, relocation support to Germany, €1,750 annual learning and development budget, fitness membership, childcare reimbursement, full Deutschland Ticket coverage, flexible hours and home office options, 30 days paid leave, and work-from-anywhere flexibility up to 60 days per year.

Get A Job.ai is an equal opportunity recruiter. We welcome candidates from all backgrounds and are committed to building diverse teams for our clients. If you don't meet every requirement but believe you'd excel in this role, we encourage you to apply.