Interim Head of Information Security

Accountabilities

• Own and continuously improve the organization’s overall information security posture, establishing clear and measurable KPIs to provide visibility into security risks and progress.

• Define and evolve the information security strategy in alignment with business priorities and the changing threat landscape.

• Partner with Engineering teams to integrate security throughout the software development lifecycle (SDLC) and platform operations, promoting secure-by-design practices.

• Establish pragmatic security standards, policies, and guardrails that provide teams with clear, risk-based guidance and support effective prioritization.

• Prepare the organization for regulatory and audit requirements, including PCI-DSS and SOC 2, by translating compliance expectations into practical, scalable controls.

• Strengthen threat detection and response capabilities through effective logging, monitoring, and alerting across applications and infrastructure.

• Evaluate and implement security technologies that fit existing architecture and engineering workflows, contributing to build-versus-buy decisions.

• Advise internal stakeholders on security matters and represent the organization in relevant discussions with customers, partners, and auditors.

• Lead and support a small team while fostering accountability and a shared responsibility for security.

Requirements:

• At least 7 years of professional experience in Information Security, Security Engineering, or a closely related field.

• A degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.

• Experience working with software development organizations and a strong understanding of how modern applications and platforms are built, deployed, and operated.

• A proven background in information security or security engineering, ideally in cloud-based or SaaS environments.

• Familiarity with security standards and frameworks such as PCI-DSS and SOC 2, or comparable compliance approaches.

• Experience working with sensitive or payment-related data is a strong advantage.

• Exposure to security considerations in AI-enabled environments is a plus.

• Strong technical foundations, including knowledge of modern application architectures, APIs, identity and access management, and common vulnerabilities in distributed systems.

• Ability to engage confidently with engineering teams on architecture and security decisions.

• Experience assessing security tools and integrating logging, monitoring, and threat detection into development and operational workflows.

• Previous experience leading or developing small teams.

• Strong ownership, accountability, and a structured, transparent approach focused on measurable outcomes.

• Excellent communication and stakeholder-management skills, with the ability to build trust across technical and non-technical teams.

• A collaborative mindset that encourages constructive dialogue and promotes security as a shared responsibility.

• Fluent written and spoken English is required; German language skills are an advantage.

Benefits:

• Flexible working arrangements, including remote, office-based, or hybrid options.

• Competitive salary and compensation package.

• Personalized career growth opportunities.

• Professional development resources, including mentorship, technical talks, training, and centers of excellence.

• Active technical communities and regular knowledge-sharing opportunities.

• Education reimbursement.

• Anniversary gifts and recognition.

• Corporate events and team-building activities.

• Additional benefits depending on location.