IT Security Manager

About the Role

We are looking for an experienced IT Security Manager to oversee and champion compliance and information security across our product and operational landscape. This role involves driving the company through security certifications and audit procedures, while continuously enhancing security policies and process controls. Collaborating closely with engineering teams, the manager will translate regulatory requirements into tangible software development guidelines.

Key Responsibilities

• Develop and uphold compliance frameworks in line with ISO 27001, GDPR, and medical device regulations.
• Lead end-to-end security certification efforts, including preparing for and managing audits.
• Ensure ongoing compliance in both development workflows and broader business processes.
• Work collaboratively with engineering teams to ensure secure and compliant product delivery.

Required Profile

• Demonstrated leadership in guiding companies through ISO 27001 or equivalent security certification processes.
• Direct experience managing compliance within an ISO 27001 Information Security Management System.
• Fluent communication skills in both German and English.
• Comprehensive experience partnering with software engineering teams on compliance and security matters.

Desired Qualifications

• Familiarity with GDPR, ISO 13485, IEC 62304, Medical Device Regulation (MDR), DiGAV, or related compliance frameworks.
• Background in medical technology, health technology, or highly regulated SaaS environments.
• Experience coordinating audits, working with external assessors, and managing certification authorities.
• A strong commitment to continuous improvement and taking ownership of security initiatives.

Why Join?

• Opportunity to contribute to meaningful projects with tangible real-world impact.
• Ability to own critical responsibilities in a fast-growing meditech scale-up.
• Flexible work hours combined with a hybrid work model based in Berlin.
• Engagement in a supportive, knowledge-sharing and team-oriented culture.