Head of IT and InfoSec

Apex.AI is an international software company specializing in the development of safety-certified, developer-friendly, and scalable software for mobility systems, aiming to accelerate the transition to software-defined vehicles and mobility.

We are seeking an experienced hands‑on Head of IT and InfoSec to lead our IT and information security functions. This is a unique position that combines strategic leadership and tactical day‑to‑day IT operations. You will define roadmaps, IT infrastructure implementation solutions and collaborate with our engineering and product management functions to ensure a resilient and scalable IT environment and processes in compliance with international standards such as ISO27001 and TISAX.

This role will initially be an individual contributor position, taking ownership of our existing IT environment and Information Security Management System (ISMS). As the company grows, you'll have the opportunity to build, mentor, and lead an IT team, making this an ideal role for someone who enjoys creating structure today while helping shape the future of the department.

This role is located in our Munich office. Authorization to work in Germany is required.

What You’ll Do

IT infrastructure

• Own and manage our cloud and on‑prem IT systems
• MDM, IAM, SSO/MFA
• EDR/Antivirus solutions, threat detection and response
• Cloud‑based email and collaboration
• Cloud file storage services, permissions management, access provision
• On‑prem and cloud network setup and configuration (wired/wireless)
• On‑prem and cloud server management
• VPN solution management (micro‑segmentation, policies and rules)
• Integrations between various IT systems
• Linux and macOS endpoint management

IT services delivery

• Manage IT services delivery, ticketing system, IT support requests, act as a point of contact for on‑site/remote end‑user support in our offices in Germany and remote support in US (California) and APAC region
• Execute IT onboarding/offboarding of full‑time employees and contractors

Information security and compliance

• Own and maintain controls and formal ISMS (information security management system) compliant with ISO27001 and TISAX standards
• Act as a main point of contact for information security audits with third parties and auditors
• Provide necessary information for customer information security questionnaires
• Information security incidents management and readiness
• Disaster recovery and business continuity

Strategy and collaboration

• Define and execute IT and infosec roadmap and strategy
• Manage IT suppliers and vendor relations, act as a point of contact with various suppliers, manage renewals, cancellations, pricing negotiations
• Collaborate with engineering and DevOps on various projects
• Collaborate and oversee AI‑related controls and secure AI solutions implementation
• Support of business applications for various business functions (sales, HR, legal, etc.)
• Document formal IT processes and policies, create new policies and update the existing ones

What you bring

• Bachelor’s degree or higher in computer science, engineering, or a related field — or equivalent work experience
• Fluent in English and professional German language proficiency (minimum B2 level)
• At least 7 years of experience in IT with a combination of hands‑on, IT support and managing IT function, establishing policies and processes, and implementing IT solutions end‑to‑end
• Ability to coordinate work across different time zones and regions
• Experience in administration of various systems such as Google Workspace (Gmail, GDrive, Chat), JumpCloud (or similar MDM/IAM), Microsoft 365 (Azure/Entra, SharePoint/OneDrive/Teams)
• Experience in end‑user devices management (centralized updates/patching, policies, encryption), deep understanding of Linux and MacOS management
• Experience with SSO/MFA implementations
• Experience in network management (Aruba, Fortinet, Cisco, Zscaler), solid understanding of network protocols, TCP/IP and OSI models, routing, DHCP, DNS, etc.
• Experience in setting up and managing servers on‑prem: virtualization, IPMI, RAID array management, specifically Linux servers
• Solid understanding of AWS fundamentals (EC2, EBS, RDS, IAM)
• Basic scripting skills in Bash, PowerShell, (Python knowledge is a plus)
• Backup and restore best practices
• Experience with monitoring and logging solutions

Nice to have

• IT and/or information security certifications such as CompTIA, ITIL, CCNA, etc.
• First‑hand experience participating in IT and information security audits
• ISO27001 and/or TISAX controls knowledge and experience implementing them in fast‑paced environment
• Understanding of CI/CD infrastructure, version control
• Experience in implementing of AI/LLM solutions
• Experience establishing ISMS from scratch and maintaining existing ISMS

Benefits

• Play a key role in shaping the IT and Information Security foundation of a company developing cutting‑edge software for autonomous and software‑defined mobility systems.
• Take ownership of a global IT environment with the opportunity to define strategy, drive technical decisions, and build the function as the company grows.
• Partner closely with world‑class engineers, DevOps teams, and business leaders to deliver secure, scalable, and developer-friendly infrastructure.
• Work with modern cloud technologies, enterprise security frameworks, and AI‑enabled solutions while helping maintain compliance with industry standards such as ISO 27001 and TISAX.
• Enjoy competitive compensation, comprehensive benefits, and strong opportunities for professional growth and leadership development.
• Be part of an international, engineering-driven culture that values ownership, collaboration, continuous learning, and technical excellence.