Information Security Manager (all genders)

Your mission

Join airfocus, a standout company recognized by Kununu as a TOP 5% best-rated company for 2023 and 2024, boasting a 4.8 rating and 94% recommendation on Glassdoor - be part of our success story NOW!

airfocus, the world’s first modular product management platform, is growing on all continents.
We have proven to be an up-and-coming industry leader with a proven business model and a first-class team.
Now, with thousands of users from customers like Shopify, Caterpillar, or The Washington Post, it’s time to add fuel to the fire and reach the next level of information security

We are looking for a motivated information security manager who will help handle and manage security requirements, monitor our compliance with ISO27001 & SOC 2 and be the person to talk to our customers and respond to all vendor security questionnaires. In this role, you will directly report to the CTO and CRO and cross collaborate with all departments.

What you’ll do:

With the support and expertise of our current information security manager, you will take the lead in implementing or enhancing information security controls, with a focus on SOC2. Your role will involve ensuring that these controls align with applicable laws, regulations, and industry standards (such as GDPR and ISO27001), as well as meeting customer and business requirements.
You monitor, investigate, and resolve issues, create reports, conduct security assessments, and drive security programs within the company and its processes and employees.
You oversee the implementation and management of security technologies around our SaaS product.
You support our departments with all information security-related questions during the proposal and negotiation processes with potential clients/customers.
You develop and deliver security awareness and training programs to educate employees on security best practices and promote/maintain a culture of security throughout the organization.
You conduct regular security assessments and audits to identify gaps in our security posture and recommend appropriate remediation actions.
You own the company device management to ensure compliance with regulations and industry standards.

Your profile

You have a Bachelor’s or Master’s degree in IT security, information systems, computer science, technology management, or an apprenticeship in similar fields and a first good idea of information security-related questions.
You have a good understanding of the security challenges and solutions of modern cloud-based SaaS providers.
1+ year of working experience with information security management systems, including risk assessment, threat management, and incident response.
You enjoy solving problems and are passionate about combining strong security with the fast-moving environment of a SaaS product management startup.
You are a self-driven project manager who is familiar with the different workstreams of an ISO 27001 and SOC 2 certification in a structured manner.
Have a rough understanding of the client-server architecture underlying modern web applications and the best practices of securing them (such as OWASP Top 10), as well as an understanding of cloud hosting and the technologies used for it (k8s, infrastructure as code).
Ability to communicate with colleagues at all levels throughout the business to develop strong relationships with different stakeholders.
Excellent written and spoken English and interpersonal skills to effectively collaborate with cross-functional teams and stakeholders at all levels. German is a plus.
Provide a clean criminal record certificate
Bonus: CIPP/E certification

Why us?

You'll join a diverse and world-class team with plenty of opportunities for personal growth, impact, and learning.

Boost your personal development and gain new skills in an exhilarating space.
Competitive compensation based on prior experience.
Flexible working hours.
Equipment support: MacBook Pro or notebook and monitor of your choice.
Learning budget: We enjoy learning and growing while working on hard problems together. Every year you can spend your learning budget on your professional development (courses, books, classes).
Remote first team: Work from our cool HQ in Hamburg or anywhere - forever!

#LI-remote

Auf diese Stelle bewerben

About us

At airfocus, we're reimagining the way teams make decisions. From how they prioritize their never-ending list of features, ideas, and projects to how they create beautiful yet effective roadmaps, the work we do is shaping the future of collaboration and strategy. To get there, we’ve brought together a collective of optimists and doers to tackle challenges along this ride. We believe in learning by doing – and that there is no better classroom than real-world experience.

We strive for product excellence, a superior user experience, and great storytelling because we believe those are the best ways to create value for our customers and employees. Our team is made up of talented individuals who are highly motivated to grow our company and themselves – and have fun in the process.

Join us and help shape an amazing company. From Hamburg, or wherever you best get stuff done.

Your data will be processed by us upon receipt of your application. For more information on the purpose and scope of data processing, please refer to our Careers privacy policy.