Principal Information Security Manager

🕒 il y a 7 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Staffbase

Site WebLinkedInTous les Emplois

501 - 1000 employés

Fondée en 2014

👥 RH Tech

☁️ SaaS

🏢 Entreprise

💰 €115 000 000 Series E - Staffbase en 2022-03

HR Tech • SaaS • Enterprise

Staffbase est une plateforme d'expérience employé alimentée par l'IA qui aide les organisations à atteindre, informer et soutenir chaque employé, qu'il s'agisse de travailleurs de première ligne ou de personnel de bureau. La plateforme inclut un intranet / hub employé, une application mobile pour les employés, des campagnes d'e-mails internes ciblées, un CMS sans tête, un assistant IA (Navigator) pour des réponses instantanées, la signalisation numérique, des briefings audio, et des intégrations avec Microsoft 365, ServiceNow, Cornerstone, Google, et d'autres. Staffbase met l'accent sur la gouvernance des contenus, la personnalisation, et l'engagement des premières lignes, et est utilisé par plus de 1 500 clients grands comptes pour centraliser les communications, les connaissances et la prestation de services à travers les canaux.

Description

• Act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence. • Report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers. • Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation. • Own the control framework and ensure it stays current as the business evolves. • Prepare the InfoSec program for investor and M&A due diligence scrutiny. • Own the response to enterprise customer security questionnaires and RFPs. • Represent Staffbase credibly in customer security reviews, calls, and audits. • Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality. • Maintain the risk register and drive risk treatment decisions with relevant stakeholders. • Own vendor security assessments for critical and high-risk suppliers. • Own the internal security policy framework, keep it current, understandable, and enforced. • Design and run security awareness programs that change behaviour, not just tick boxes. • Own the incident response plan and lead execution when incidents occur. • Coordinate with Engineering, Legal, and leadership during incidents. • Drive post-incident reviews and close findings with owners.

🎯 Exigences

• 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company • Proven ownership of ISO 27001 and/or SOC 2 programs • Track record of representing InfoSec to enterprise customers, including security reviews and escalations • Must be fluent in German and English • Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations

🏖️ Avantages

• Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan) • Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560 • Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August • Support - we’re offering a company pension scheme • Volunteers Day - you’ll get one day off per year for supporting a social project