Principal Information Security Manager

🔥 6 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Staffbase

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2014

👥 HR Tech

☁️ SaaS

🏢 Enterprise

💰 $115M Series E - Staffbase on 2022-03

HR Tech • SaaS • Enterprise

Staffbase is an AI-powered employee experience platform that helps organizations reach, inform, and support every employee — from frontline workers to office-based staff. The platform includes an intranet/employee hub, mobile employee app, targeted internal email campaigns, headless CMS, AI assistant (Navigator) for instant answers, digital signage, audio briefings, and integrations with Microsoft 365, ServiceNow, Cornerstone, Google, and others. Staffbase emphasizes content governance, personalization, and frontline engagement, and is used by over 1,500 enterprise customers to centralize communications, knowledge, and service delivery across channels.

📋 Description

• Act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence. • Report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers. • Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation. • Own the control framework and ensure it stays current as the business evolves. • Prepare the InfoSec program for investor and M&A due diligence scrutiny. • Own the response to enterprise customer security questionnaires and RFPs. • Represent Staffbase credibly in customer security reviews, calls, and audits. • Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality. • Maintain the risk register and drive risk treatment decisions with relevant stakeholders. • Own vendor security assessments for critical and high-risk suppliers. • Own the internal security policy framework, keep it current, understandable, and enforced. • Design and run security awareness programs that change behaviour, not just tick boxes. • Own the incident response plan and lead execution when incidents occur. • Coordinate with Engineering, Legal, and leadership during incidents. • Drive post-incident reviews and close findings with owners.

🎯 Requirements

• 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company • Proven ownership of ISO 27001 and/or SOC 2 programs • Track record of representing InfoSec to enterprise customers, including security reviews and escalations • Must be fluent in German and English • Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations

🏖️ Benefits

• Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan) • Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560 • Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August • Support - we’re offering a company pension scheme • Volunteers Day - you’ll get one day off per year for supporting a social project