Information Security Lead

This position is posted by Jobgether on behalf of a partner company. We are currently looking for an Information Security Lead in Germany.

This is a high-impact hybrid role at the intersection of backend engineering and information security, where you will help shape both secure software architecture and the company’s overall security strategy. You will act as a hands-on senior Python engineer while also serving as the de facto security leader, driving policies, governance, and compliance across the organization. Working within a fast-scaling digital health environment, your work will directly support the protection of sensitive medical data and the reliability of critical telemedicine services. You will collaborate closely with engineering, infrastructure, and leadership teams to embed security into every layer of the platform. This role combines deep technical execution with strategic ownership of information security. It is ideal for someone who wants their work to have both immediate engineering impact and long-term organizational influence in a regulated healthcare setting.

You will be responsible for strengthening the security posture of the platform while also contributing directly to backend development and system reliability.

• Design, build, and maintain secure, scalable backend services and APIs using Python and Django
• Act as the organization’s security owner by defining and driving the overall information security strategy
• Lead the implementation, maintenance, and continuous improvement of the Information Security Management System (ISMS)
• Own ISO 27001 certification efforts, including gap analysis, audit preparation, and ongoing compliance management
• Define, implement, and enforce security policies, standards, and procedures across engineering and operational teams
• Conduct risk assessments, threat modeling, and vulnerability management across systems and infrastructure
• Partner with product, infrastructure, and leadership teams to ensure security is embedded into architectural decisions
• Promote security awareness across the organization through training, guidance, and best practice sharing
• Monitor emerging threats and ensure proactive mitigation in a regulated healthcare environment

---

Requirements:

You bring strong backend engineering expertise combined with deep practical knowledge of security frameworks and cloud environments.

• 5+ years of experience in Python backend development, ideally with Django
• Strong understanding of application security, including IAM, encryption, secure SDLC, and network security principles
• Proven experience working with ISO 27001, including implementation or certification leadership responsibilities
• Familiarity with healthcare or regulated data environments (e.g., GDPR; HIPAA or German healthcare standards is a plus)
• Experience with cloud platforms such as AWS, GCP, or Azure
• Knowledge of DevSecOps practices and secure infrastructure design
• Ability to communicate complex security concepts clearly to both technical and non-technical stakeholders
• Strong ownership mindset with the ability to operate independently and influence cross-functional teams
• Fluent in English; German language skills are a plus

---

Benefits:

• 30 days of annual vacation
• Remote-friendly and flexible working arrangements
• Company pension scheme with employer contributions
• Employee stock participation program
• Mobility benefits including JobRad and FINN.auto discounts
• Urban Sports Club membership discount
• Access to learning platforms such as LinkedIn Learning and Reforge
• Annual personal development budget of up to €1,000 plus additional development days
• Corporate discounts and employee benefits program
• Opportunity to contribute to a mission-driven digital healthcare platform improving access to care