(Senior) Information Security Officer (German)

This is an ideal opportunity for someone who combines excellent communication skills and strong security fundamentals , with the ability to operate confidently with both technical and non-technical stakeholders. Fluent German is essential for this role due to regular engagement with German-speaking customers.

Key Responsibilities:

Customer & Pre-Sales Security Support

• Respond to security questionnaires, RFPs, and due-diligence requests in collaboration with Sales and Pre-Sales.
• Participate in customer calls to explain Hawk’s security posture and answer technical, compliance, and infrastructure-related questions.
• Represent Hawk’s security capabilities clearly and confidently to regulated financial institutions.

ISMS & Compliance (ISO 27001)

• Support the ongoing operation and improvement of Hawk’s ISMS, ensuring alignment with ISO 27001 controls and underlying processes.
• Assist in internal audits, evidence gathering, and risk assessments.
• Help maintain certification readiness by driving documentation, process adherence, and corrective actions.

Platform & 3rd-Party Security Oversight

• Monitor the security posture of Hawk’s corporate tools, infrastructure, and integrations.
• Support vendor assessments and due diligence for security-related tools.
• Collaborate with Engineering, IT, and InfoSec to strengthen platform and enterprise security baselines.

Cross-Functional Collaboration & Stakeholder Communication

• Work closely with Information Security, IT, Engineering, Sales, Customer Success, and Procurement teams.
• Translate complex technical and security concepts into clear explanations for both technical and non-technical audiences.
• Contribute to internal security awareness, documentation, and operational processes.

Your Profile:

Technical Experience & Skills:

• 5+ years of hands-on experience in Information Security, IT Security, or a related GRC role within a B2B tech or SaaS environment
• Proven experience operating and improving an ISMS aligned to ISO 27001, including policy development, risk assessments, internal audits, and certification maintenance
• Working knowledge of additional regulatory and compliance frameworks — SOC 2, DORA, and NIS 2
• Solid understanding of IT security fundamentals: authentication, endpoint security, encryption, network basics
• Good technical competence across multiple operating systems (macOS, Windows, Linux)
• Experience coordinating with external auditors, certification bodies, and regulators
• Relevant certifications highly desirable (e.g., ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CRISC, CompTIA Security+)

Communication & Stakeholder Management:

• Fluent German and English — mandatory due to regular engagement with German-speaking customers, auditors, and regulators
• Ability to articulate complex security and compliance topics clearly to diverse audiences (engineers, customers, auditors, leadership)
• Strong documentation skills with attention to accuracy, consistency, and audit-readiness

Bonus:

• Experience with identity and access management tools (e.g., JumpCloud, Okta), MDM solutions, and enterprise security platforms
• Exposure to 3rd-party risk management, vendor security assessments, or SaaS security tooling
• Experience supporting security questionnaires, RFPs, or due-diligence calls with regulated financial customers
• Familiarity with data protection requirements (GDPR) in a security context
• A proactive, structured, and collaborative approach with the ability to balance multiple priorities in a fast-paced environment

Find Jobs in Germany on Arbeitnow

We show an excerpt and a link, and the full text when the source allows it. Brands and logos shown belong to their owners.

Source: Statistisches Bundesamt (Destatis), table; dl-de/by-2-0; StarIn's calculation

Posted Nov 01, 2026

Posted Nov 01, 2026