[Hiring] Information Security Officer @Open-Xchange

Role Description

Are you an information security professional who wants to make a real impact across a decentralized organization? You'll drive the development of our ISMS, ensure compliance with ISO 27001, and work closely with teams to turn security requirements into practical, sustainable solutions.

Your team will work closely with Engineering, Cloud Operations, and IT Architecture to help embed information security as an integral part of our products and processes.

• Run the ISMS and ISO 27001
• Coordinate the identification and documentation of technical and organizational security measures across the OX Group.
• Drive the continuous development of our ISMS by establishing sustainable governance structures, clear responsibilities, and aligned security processes and policies.
• Plan, coordinate, and support internal and external ISO 27001 audits as well as risk-based supplier assessments and audits.
• Make security work in a decentralized organization
• Harmonize security requirements and processes across different software landscapes.
• Support product cells in identifying and assessing information security risks.
• Embed Security by Design across our product portfolio.
• Handle regulation and customers
• Coordinate the assessment of relevant requirements arising from NIS2 and the Cyber Resilience Act (CRA).
• Capture and negotiate customer information security requirements.

Qualifications

• A degree in Computer Science, Business Information Systems, IT Security, or a comparable qualification.
• Practical experience in establishing, implementing, and certifying an Information Security Management System (ISMS) in accordance with ISO 27001.
• Experience assessing regulatory security requirements and translating them into practical technical and organizational requirements.
• Ideally, experience introducing or further developing cross-functional security processes in decentralized organizations.
• A solid understanding of software and cloud architectures, secure software development, and technical security measures.
• A structured and analytical approach to assessing information security risks.
• Clear and convincing communication skills, strong subject-matter expertise, and the ability to explain complex topics.
• Excellent written and spoken German and English.

Requirements

• Knowledge of the German BSI IT-Grundschutz framework is a plus.
• Knowledge of NIS2 and the Cyber Resilience Act (CRA) is an advantage.

Benefits

• The flexibility to work 100% remotely.
• Flexible working hours.
• Getting together in-person for workshops and fun team events.
• Time off to volunteer and mental health support.
• Financial relief through corporate benefits and a subsidy for ergonomic chairs and desks.
• Further location-related benefits can be discussed in an initial talk.

Company Description

At Open-Xchange (OX), we develop open-source communication and collaboration software used by public sector organizations, telcos, and hosting providers to keep data secure and under their control.

• Our products cover email, collaboration, DNS security, and related services.
• Used by millions of people worldwide.
• We work in a non-hierarchical organization that empowers everyone.
• We value expertise and continuous professional development.
• Openness and diversity are core to OX.