Information Security Lead

This position is posted by Jobgether on behalf of a partner company. We are currently looking for an Information Security Lead in Germany.

This is a high-impact hybrid role at the intersection of backend engineering and information security, where you will help shape both secure software architecture and the company’s overall security strategy. You will act as a hands-on senior Python engineer while also serving as the de facto security leader, driving policies, governance, and compliance across the organization. Working within a fast-scaling digital health environment, your work will directly support the protection of sensitive medical data and the reliability of critical telemedicine services. You will collaborate closely with engineering, infrastructure, and leadership teams to embed security into every layer of the platform. This role combines deep technical execution with strategic ownership of information security. It is ideal for someone who wants their work to have both immediate engineering impact and long-term organizational influence in a regulated healthcare setting.

Accountabilities

You will be responsible for strengthening the security posture of the platform while also contributing directly to backend development and system reliability.

• Design, build, and maintain secure, scalable backend services and APIs using Python and Django
• Act as the organization’s security owner by defining and driving the overall information security strategy
• Lead the implementation, maintenance, and continuous improvement of the Information Security Management System (ISMS)
• Own ISO 27001 certification efforts, including gap analysis, audit preparation, and ongoing compliance management
• Define, implement, and enforce security policies, standards, and procedures across engineering and operational teams
• Conduct risk assessments, threat modeling, and vulnerability management across systems and infrastructure
• Partner with product, infrastructure, and leadership teams to ensure security is embedded into architectural decisions
• Promote security awareness across the organization through training, guidance, and best practice sharing
• Monitor emerging threats and ensure proactive mitigation in a regulated healthcare environment
  
  

Requirements

You bring strong backend engineering expertise combined with deep practical knowledge of security frameworks and cloud environments.

• 5+ years of experience in Python backend development, ideally with Django
• Strong understanding of application security, including IAM, encryption, secure SDLC, and network security principles
• Proven experience working with ISO 27001, including implementation or certification leadership responsibilities
• Familiarity with healthcare or regulated data environments (e.g., GDPR; HIPAA or German healthcare standards is a plus)
• Experience with cloud platforms such as AWS, GCP, or Azure
• Knowledge of DevSecOps practices and secure infrastructure design
• Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders
• Strong ownership mindset with the ability to operate independently and influence cross-functional teams
• Fluent in English; German language skills are a plus
  
  

Benefits

• 30 days of annual vacation
• Remote-friendly and flexible working arrangements
• Company pension scheme with employer contributions
• Employee stock participation program
• Mobility benefits including JobRad and FINN.auto discounts
• Urban Sports Club membership discount
• Access to learning platforms such as LinkedIn Learning and Reforge
• Annual personal development budget of up to €1,000 plus additional development days
• Corporate discounts and employee benefits program
• Opportunity to contribute to a mission-driven digital healthcare platform improving access to care
  
  

How Jobgether Works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.