This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry-leading and award-winning agentic AI communications channels – intranet, employee app and email solutions – create engaging experiences that connect and empower employees. Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 750+ employees supports 2,000+ customers – reaching over 16.4 million employees – in transforming their employee experience. We are proud to be a Unicorn company – privately valued at over $1 billion – demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication. Our information security program is fit for purpose and operationally sound. The next chapter is about making it investor-ready, AI-efficient, and capable of sustaining enterprise customer trust at scale. This is not a build-from-scratch role. It is a step up in maturity: fewer manual processes and sharper governance. The position sits at the center of the InfoSec team; you coordinate across teams, own outcomes and represent the function. You are comfortable being the person customers and auditors talk to. You think in programs and systems, not tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows, and are empowered to drive that change as we build out our AI-driven operating model across the company.
Job Responsibility
Act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day
Lead ISO 27001 and SOC 2 audit cycles end-to-end
Own the control framework
Prepare the InfoSec program for investor and M&A due diligence scrutiny
Own the response to enterprise customer security questionnaires and RFPs
Represent Staffbase credibly in customer security reviews, calls, and audits
Build scalable approaches to reduce response time
Maintain the risk register and drive risk treatment decisions
Own vendor security assessments for critical and high-risk suppliers
Partner with Procurement and Legal on AI-assisted review workflows
Own the internal security policy framework
Design and run security awareness programs
Own the incident response plan and lead execution when incidents occur
Coordinate with Engineering, Legal, and leadership during incidents
Drive post-incident reviews and close findings with owners
Requirements
5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
Proven ownership of ISO 27001 and/or SOC 2 programs
Track record of representing InfoSec to enterprise customers, including security reviews and escalations
Fluent in German and English
Comfortable with AI-driven tooling
actively looks for automation opportunities in compliance and operations
Experience supporting or preparing for M&A or investor due diligence processes
Background working alongside Legal, Procurement, and Engineering
Practical understanding of cloud security architecture (enough to challenge and validate, not operate)
Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent
Nice to have
Experience supporting or preparing for M&A or investor due diligence processes
Background working alongside Legal, Procurement, and Engineering
Practical understanding of cloud security architecture
Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent
What we offer
Competitive Compensation - we offer attractive salary packages including LTIP
Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
Support - we're offering a company pension scheme
Volunteers Day - you'll get one day off per year for supporting a social project