Information Security Manager - Product Development (f/m/d)

At IONOS, you will work with our leading European provider of cloud infrastructure, cloud services, and hosting services. We offer a perspective in one of the most secure industries. Our open working structures, duz culture, and flat hierarchies with unmatched team spirit are what set us apart. We believe that job and fun can go hand in hand and provide an environment for you to do so. As we continue to grow, we are always on the lookout for new colleagues. Join IONOS and let's grow together.

Are you an experienced security expert with a passion for developing secure software? Are you excited about the challenge of protecting digital products from emerging threats? If so, we have an exciting opportunity for you to join our team at IONOS.

As Information Security Manager, you will be responsible for ensuring that our product development organization has the right processes in place for developing, maintaining, and operating secure software. You will play a key role in ensuring that our products and processes meet important compliance requirements, including GDPR, and prepare the organization for successful external audits and certifications such as ISO 27001, BSI IT-Grundschutz, and C5.

This is a high-performing role where you will work directly with the head of product development to lead and drive all security and compliance topics within the organization.

Aufgabenbereich

• Sicherheitsinitiativen leiten: Responsible for all security and compliance topics within the IONOS product development organization.
• Sichere Praktiken fördern: Promote and oversee the introduction of secure software development practices throughout the entire organization.
• Zusammenarbeit: Close cooperation with central information security to support company-wide security and compliance initiatives.
• IONOS vertreten: Competently and securely represent IONOS product development at internal and external audits and certifications.
• Sicherheitskultur fördern: Proactively promote a security-conscious mindset within the development organization through teaching and monitoring of security practices.

Qualifikationen

• Sichere Entwicklungsexpertise: A solid understanding of the Secure Software Development Lifecycles (SDLC), including threat modeling, secure coding standards (vulnerability prevention), and expertise in automated security analysis that scans both source code and live applications for vulnerabilities.
• Compliance & Audits: Proven experience with security compliance frameworks and standards such as ISO 27001, BSI IT-Grundschutz or C5.
• KI-Sicherheit: A deep understanding of the emerging security landscape for artificial intelligence, including knowledge of common AI-specific threats and familiarity with the principles of securing AI systems during their development lifecycle.
• DevSecOps: Familiarity with modern DevSecOps practices, including operating software in container-based cloud environments.
• Kommunikationsfähigkeiten: Excellent communication and interpersonal skills, with the ability to explain complex security topics to both technical and non-technical listeners.
• Problemlösung: A proactive and result-oriented mindset with strong analytical and problem-solving skills.
• Führung: Proven ability to drive security initiatives forward and influence changes on a peer-to-peer level with engineering teams.

Benefits

• Hybrid working model.
• Flexible working hours through trust-based working time.
• A subsidized canteen and various free drinks at some locations.
• Modern office spaces with excellent public transportation links.
• Diverse employee discounts for activities and products.
• Employee events like summer and winter parties, as well as workshops.
• Multiple opportunities for further education and development.
• Variety of health offers, such as sports and health courses.

Über IONOS

IONOS is the leading European digitalization partner for small and medium-sized enterprises (SMEs). With over six million customers worldwide, IONOS has a global presence in 18 markets across Europe and North America. As a “One-Stop-Shop