[Hiring] Director, Information Security and Technology @Revalize

Role Description

The Director of Information Security and IT Operations will serve as a strategic leader responsible for safeguarding the organization’s digital assets while ensuring the reliability, scalability, and efficiency of its IT infrastructure.

• Combine oversight of enterprise-wide information security programs with management of core IT operations, including networks, servers, cloud environments, and end-user devices.
• Design and implement security frameworks, risk management strategies, and compliance initiatives.
• Drive modernization of IT systems to support a global SaaS business model.
• Embed security into the software development lifecycle, manage incident response, and ensure business continuity.
• Optimize IT service delivery, network performance, and device lifecycle management.
• Collaborate closely with engineering, product, and business teams to align technology initiatives with organizational goals.
• Champion the secure and responsible adoption of AI and emerging technologies.
• Influence stakeholders at all levels to achieve operational excellence and robust security posture.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field.
• Minimum of 8–10 years in information security roles, with at least 3 years in a leadership or management capacity.
• Strong knowledge of cybersecurity frameworks (e.g., ISO 27001, SOC 2) and familiarity with NIST CSF or equivalent.
• Proven experience developing and implementing security policies, standards, and procedures in a SaaS or software-driven environment.
• Hands-on experience with application and product security, including secure SDLC and DevSecOps practices.
• Solid understanding of cloud security principles and SaaS operations (identity and access management, encryption, monitoring).
• Demonstrated ability to manage incident response and vulnerability management programs effectively.
• Excellent communication and interpersonal skills, with the ability to convey security concepts to technical and non-technical audiences.
• High level of integrity, sound judgment, and ability to handle confidential information appropriately.

Requirements

• Master’s degree in Information Security, Cybersecurity, or a related field (preferred).
• Professional certifications such as CISSP, CISM, or CISA (preferred).
• Proficiency with German language (preferred).
• Experience in a global SaaS organization or software company serving the manufacturing technology industry (preferred).
• Familiarity with AI security risks and governance for AI-enabled products and services (preferred).
• Experience implementing DevSecOps practices and security automation in CI/CD pipelines (preferred).
• Knowledge of third-party risk management and supplier security assurance processes (preferred).
• Strong background in cloud-native security architectures (AWS, Azure, or GCP) (preferred).
• Experience with regulatory compliance in multiple jurisdictions (e.g., GDPR, SOC 2, ISO 27001) (preferred).
• Understanding of global IT function including asset management, network management, and associated support and refresh processes (preferred).

Benefits

• PTO, Sick and Parental Leave
• Medical, Dental, and Vision Insurance
• 401(k) Plan
• Health Savings Account
• Life Insurance
• Employee Assistance Program