Head of Cybersecurity

Job not on LinkedIn

🔥 18 minutes ago

🇩🇪 Germany – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Orca Group

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2025

🏗️ Construction

☁️ SaaS

🤝 B2B

Construction • SaaS • B2B

Orca Group is a German-based software group that builds the digital foundation for the construction industry. The company bundles specialist software brands and expertise across CAD, AVA (planning, tendering and cost management), CDE & BIM, project controlling and site/asset management to connect planning, procurement, execution and operation phases of building projects. Orca Group’s portfolio includes products and platforms (e. g. , AUSSCHREIBEN. DE and specialist brands such as ORCA Software, BauerSoftware, SOFTTECH, NetzWerkPlan, Acclaro and others) that accelerate workflows, reduce process breaks and support sustainable, resource-aware decision making across the project lifecycle. Its solutions are aimed at architecture, engineering and construction professionals and are positioned as integrated, business-facing software (digital building ecosystem) primarily serving the DACH market.

📋 Description

• Own the group-wide cybersecurity strategy and roadmap • Establish Security by Design and a secure Software Development Lifecycle, including threat modeling, automated security checks, and engineering standards • Create a transparent risk picture across products and companies • Define cloud security standards for identity, access, networks, and core cloud components in collaboration with Platform Engineering • Develop security standards for AI products and AI agents • Address risks such as prompt injection, data leakage, permissions, and model supply chain security • Oversee penetration testing, vulnerability management, and incident response • Ensure the consistent remediation of identified risks • Translate ISO 27001, BSI C5, NIS2, the Cyber Resilience Act, and GDPR into technical standards • Build and further develop the group-wide Security Guild • Embed security expertise within Product and Engineering teams • Work closely with Platform Engineering as well as Product and Engineering teams

🎯 Requirements

• Several years of experience in information security, including multiple years of responsibility for security in a software, SaaS, or comparable technology environment • Proven experience establishing application and cloud security directly within engineering teams, for example through DevSecOps, threat modeling, and Secure SDLC practices • Strong practical knowledge of cloud security, ideally in a Microsoft Azure environment • Good understanding of modern AI and agent security risks and how to address them technically in products • Experience with NIS2, the Cyber Resilience Act, GDPR, and ISO 27001, as well as implementing them in technical processes • Ability to establish security standards across the organization and gain the commitment of engineering teams without direct line management responsibility • Fluent German communication skills (minimum C1 level) • Fluent English communication skills (minimum C1 level) • Experience in penetration testing, incident response, security certifications, or security within a multi-company or private-equity-driven structure is a plus, but not required

🏖️ Benefits

• Sports and health programs • Company events • Support with kindergarten fees • Company pension scheme • Agile environment with short decision-making paths • Significant scope to shape and influence • Close collaboration with leadership and executive management • Modern working environment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume