Principal Information Security Lead

About the role

Orbem is looking for a Principal of Information Security to own and evolve its security function at a critical growth stage. You will lead the ISO 27001 re‑audit, shape the security strategy, and drive day‑to‑day operations while coordinating external partners.

Key responsibilities

• Lead the upcoming ISO 27001 re‑audit, define strategy and execute the audit plan.
• Maintain the information security risk register and run regular risk reviews with leadership.
• Represent Orbem with auditors, customer security teams and regulators as the CISO.
• Design, implement and continuously improve operational security processes, including vendor risk management and ISMS governance.
• Act as incident commander for security events and author security policies and communications.
• Manage a deliberate external provider stack (audit support, data‑protection advisors, MSSP, penetration testing, compliance platforms).
• Collaborate closely with the Security Engineering team and build a Security Ambassadors network across business units.
• Leverage AI and automation for evidence collection, policy drafting, training and awareness.

Required profile

• Scale‑up security leadership experience (150‑600 FTE company), preferably as the #1 or #2 security professional.
• Hands‑on ISO 27001 experience, having guided a company through a full certification cycle.
• Comfort operating without a large team and making high‑stakes decisions under uncertainty.
• Resilience to make tough, sometimes unpopular, security calls and own the outcomes.
• Strong communication skills to translate security risk for executives and technical teams.

Required skills

• ISO 27001 compliance and audit management
• GDPR, NIS2 and SOC 2 regulatory knowledge
• Risk register creation and maintenance
• Incident response and security governance
• Vendor risk assessment and third‑party security management
• Security policy authoring and documentation
• AI‑driven automation for security processes

What we offer

• International, multicultural environment with 40+ nationalities
• Stock options and comprehensive benefits package
• Relocation support to Germany
• Annual €1,750 learning & development budget
• Flexible hours, hybrid remote work and up to 60 days work‑from‑anywhere per year
• 30 days paid leave and additional personal leave