Service Owner – IT Security & Infrastructure Protection Full-time [m/f/x]

Service Owner – IT Security & Infrastructure Protection

m/w/d

Employment Type: Hybrid | Full-time
Start Date: As soon as possible

Protect the Digital Foundation of Healthcare Innovation

At FotoFinder, we develop world-leading medical imaging, AI-powered diagnostics and connected digital health solutions that help physicians detect skin cancer earlier and improve patient care worldwide. As our portfolio continues to evolve towards cloud-based platforms, AI-enabled applications and connected medical devices, cybersecurity and resilient IT infrastructure have become fundamental to our success.

We are looking for a Service Owner – IT Security & Infrastructure Protection who is passionate about building secure, resilient and future-ready IT services. In this role, you will own and continuously develop FotoFinder's global cybersecurity and infrastructure protection capabilities across our hybrid Microsoft and AWS environment. Working closely with IT, Software Engineering, AI, Product Management and external partners, you will help protect our business, our customers, our innovations and the sensitive healthcare data entrusted to us while enabling the next generation of digital MedTech solutions.

Why Join FotoFinder?

• Shape the cybersecurity strategy of a global MedTech company.
• Work with Microsoft Defender, Sentinel, AWS Security and Zero Trust technologies.
• Protect AI, cloud and connected medical device platforms.
• Collaborate internationally with Product, Software, AI and Infrastructure teams.
• Help build a secure foundation for FotoFinder's SaaS transformation.

Your responsibilities

As the Service Owner for IT Security & Infrastructure Protection, you will shape the future of FotoFinder's global cybersecurity landscape. You will own the strategy, roadmap and continuous improvement of our security and infrastructure services, ensuring secure, reliable and compliant operations across all company locations. Working closely with internal teams and external partners, you will enable a secure digital foundation for our business applications, cloud platforms, AI solutions and connected medical products.

Cybersecurity Service Ownership

• Own the global IT Security & Infrastructure Protection service across all FotoFinder entities.
• Define the service strategy, roadmap, governance model and KPIs.
• Continuously improve security services and manage strategic partners.
• Protect hybrid Microsoft and AWS environments.
• Implement Zero Trust architecture, infrastructure hardening and vulnerability management.
• Drive cloud security best practices for SaaS platforms and connected medical products.

Identity, Security Operations & Incident Response

• Own IAM, MFA, PAM and Conditional Access.
• Lead Microsoft Sentinel (SIEM), MDR and security monitoring.
• Coordinate incident response and cyber crisis management.

Compliance, Risk & Security Governance

• Develop the ISMS and ensure compliance with ISO/IEC 27001, MDR, GDPR, NIS2 and the Cyber Resilience Act.
• Lead security risk assessments, supplier reviews and governance.

Business Partnership & Security Enablement

• Partner with Software Engineering, AI, Product Management, Quality and Service.
• Support DevSecOps and secure software development.
• Promote security-by-design and cybersecurity awareness.

Your Profile

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity or related field.
• 7+ years of cybersecurity and infrastructure experience.
• Microsoft Defender XDR, Sentinel, Entra ID, Intune and Microsoft 365 Security.
• AWS Security including IAM, GuardDuty, Security Hub, Inspector, CloudTrail, WAF and KMS.
• Experience with SIEM, MDR, IAM, PAM, endpoint protection and Zero Trust.
• Knowledge of ISO/IEC 27001, ISO 13485, IEC 62304, MDR, GDPR, NIS2 and CRA.
• DevSecOps, hybrid cloud security and stakeholder management.

Nice to Have

• CISSP/CISM/CCSP/AWS Security Specialty.
• Medical device or healthcare experience.
• Penetration testing and SaaS platform security.

Within your first 6–12 months, you will:

• Define the global security roadmap.
• Strengthen Microsoft Sentinel and Defender.
• Enhance AWS governance.
• Standardize IAM globally.
• Improve SIEM/MDR operations.
• Support secure SaaS transformation.

What We Offer

• A key role in shaping the future digital platform of a global MedTech leader
• Work on cutting-edge AI, imaging, and cloud technologies
• High degree of ownership and strategic impact
• Collaborative, international, and innovation-driven environment