What are the main performance objectives in this role?
We are looking for a solutions-oriented and highly motivated senior professional to join our team in Berlin. This is a high-impact role responsible for the entirety of our internal IT infrastructure and, most importantly, for owning and managing our information security and compliance programs.
You are not just maintaining systems; you are a strategic partner ensuring our technology is not only efficient and reliable but also secure and compliant with international standards like ISO 27001. You should be a resourceful problem-solver with the patience to communicate with a variety of international teams and users, and the expertise to lead our security efforts.You'll be working from the office 4 days a week.
Information Security & Compliance Management (40%)
- Own and manage our Information Security Management System (ISMS) in accordance with ISO 27001.
- Lead the preparation and execution of internal and external security and compliance audits.
- Conduct regular risk assessments, maintain the risk register, and manage the risk treatment plan.
- Develop, update, and enforce company-wide information security policies, procedures, and best practices.
- Manage and improve the company's security awareness program, including phishing simulations and training.
- Ensure all processes and documentation are compliant with data protection regulations, particularly GDPR.
Core IT Administration & Operations (60%)
- Administer and improve the office infrastructure (WLAN, VPN, printers, etc.).
- Manage the full lifecycle of company hardware (laptops, mobile phones, accessories), from procurement and vendor management to setup (MDM) and maintenance.
- Administer core internal tools and user access management (SSO, permissions), including Google Workspace Enterprise, Microsoft 365, and Microsoft Entra ID/Intune.
- Automate IT processes and workflows to improve efficiency and reduce manual effort.
- Provide timely and effective day-to-day IT support for our global team.
- Manage the technical onboarding and offboarding of all employees