What you will do:

• Drive our security roadmap: Develop and implement practical, scalable security policies and procedures that align with our rapid growth and business objectives.
• Architect and implement security solutions: Evaluate, deploy, and manage security tools and technologies that fit our evolving needs, with a focus on cloud security.
• Be the security champion: Proactively identify and mitigate security risks across our infrastructure, applications, and data.
• Be the go to person: manage stakeholders like internal and external auditors, certification companies, German authorities or similar
• Navigate the compliance landscape: Ensure we meet relevant regulatory requirements and industry best practices in a pragmatic way.
• Empower our teams with security awareness: Foster a balanced security-first culture through engaging training and communication.
• Lead incident response efforts: Develop and execute effective plans to handle and learn from any security incidents.
• Collaborate closely with the IT Ops team: Integrate security seamlessly into our IT landscape and lifecycle.
• Stay ahead of the curve: Continuously research the latest threats and trends to keep our defences strong

Who you are:

• You have a solid understanding of information security principles and best practices, with 3+ years of relevant experience, e.g. gained in Big4, IT consulting or a fast-growing scale-up.
• You have successfully completed your studies, ideally in Business Informatics, Business Administration or a comparable field.
• You're familiar with cloud security (AWS) and the security challenges of modern web applications.
• You have a proven track record of implementing and managing security controls and technologies.
• You're comfortable with risk assessment, vulnerability management, and incident response processes.
• You're a strong communicator who can explain technical security concepts to both technical and non-technical audiences at various levels.
• You're fluent in English and German (both need to be at least at the C1 level)
• Crucially, you have a proactive, hands-on mentality and are excited to build and shape security in a dynamic startup environment.
• 
  
•