Information Security Manager - SDLC / Compliance / DevSecOps (m/f/d) - IONOS SE

Über das Unternehmen Wir sind Europas führende Plattform für Cloud Services und Hosting-Dienstleistungen. Wir begleiten erfolgreich unsere Kund:innen bei ihrer Unternehmensentwicklung. Für unseren Unternehmenserfolg sind über 4000 Mitarbeitende in mehreren Ländern weltweit tätig, um die Anforderungen und Wünsche unserer 8,5 Millionen Kund:innen zu erfüllen. Wir sind eine Marke der United Internet AG, einem börsennotierten Unternehmen mit rund 10.200 Mitarbeitenden. Wir fördern die Entwicklung unserer Mitarbeitenden und deren unterschiedliche Talente, Interessen und Sprachen. What do we offer? Hybrid working modelFlexible working hours through trust-based working hoursAt some locations a subsidized canteen and various free drinksModern office space with very good transport connectionsVarious employee discounts for activities and productsEmployee events such as summer and winter parties, as well as workshopsNumerous training and development opportunitiesVarious health offers, such as sports and health courses What can you expect? You own all security and compliance topics within the Product Development organizationYou drive and monitor the adoption of secure software development best practices across the organizationYou closely collaborate with Central Information Security to champion company-wide security and compliance initiativesYou competently and securely represent the Product Development in internal and external audits and certificationsYou proactively foster a security-conscious mindset within the development organization by teaching and monitoring security best practices What should you bring along? You have a strong understanding of the Secure Software Development Lifecycle (SDLC), including threat modeling, secure coding standards, and proficiency with automated security analysisYou have proven experience with security compliance frameworks and standards such as ISO 27001, BSI IT-Grundschutz, or C5You are aware of the emerging security landscape for artificial intelligence, including understanding common AI-specific threats and securing AI systemsYou are familiar with modern DevSecOps practices, including operating software in container-based cloud environmentsYou possess excellent communication and interpersonal skills, with the ability to explain complex security topics to both technical and non-technical audiencesYou have a proactive and results-oriented mindset with strong analytical and problem-solving abilities, and a proven ability to drive security initiatives and influence change at a peer-to-peer level with engineering teams