Lead Information Security Manager wmd

Everphone is the onestop solution for corporate smartphones and tablets. As a leading deviceasaservice provider Everphone handles device procurement configuration management security and replacement for businesses and organizations. The time this frees up for clients IT teams totals two hours per device. DaaS allows companies and their employees to choose their preferred smartphone from manufacturers such as Apple Samsung Google and Fairphone. Everphone currently manages over 400.000 devices for more than a thousand companies including international management consultancies and several DAX companies.

Founded in 2016 by Jan Dzulko the company employs around 300 employees in Berlin Munich and Miami. Investors include Alleycorp ApolloCapital Cadence Growth Capital signals Venture Capital and T.Capital.

We are looking for an exceptional

Lead Information Security Manager (w/m/d)

About the role:

As an Lead Information Security Manager you will play a critical role in safeguarding our systems processes and data. You will contribute to building and maintaining a secure environment by ensuring compliance with key standards frameworks and best practices while actively monitoring and responding to security events. This is a challenging and rewarding opportunity to work on a wide array of information security and compliance topics while supporting our secure software development lifecycle. You will also lead and mentor a team of information security professionals fostering their growth and development while ensuring effective collaboration and achievement of security objectives.

What youll do:

Information Security & Compliance

• Develop implement and maintain our Information Security Management System (ISMS) in alignment with ISO 27001 GDPR BCM BSI ITGrundschutz and other relevant frameworks.
• Ensure documentation and compliance with information security policies and procedures including test runs.
• Conduct risk assessments audits and evaluations to identify security gaps and recommend improvements.

Cybersecurity Monitoring & Management

• Monitor security logs from cloud services including Google Workspace and other SaaS tools to detect and respond to potential threats.
• Evaluate and address vulnerabilities based on the OWASP Top 10 and other cybersecurity standards.
• Work with development teams to integrate secure practices into the software development lifecycle (Secure SDLC).
• Train and advise teams on implementing security controls and adhering to compliance requirements.

Team Management

• Lead and mentor a team of information security professionals providing guidance support and performance feedback.
• Delegate tasks effectively and ensure team members have the necessary resources and training to succeed.
• Foster a collaborative and positive team environment encouraging knowledge sharing and professional development.
• Set team goals and objectives monitor progress and provide regular updates to management.

What youll need:

Compliance Knowledge

• You have a deep understanding of ISO 27001 GDPR BCM and other relevant information security frameworks.
• You have acquired experience in managing and executing test runs and contributing to ISMS processes and documentation.
• Experience with BSI ITGrundschutz is a plus.

Technical Expertise

• Strong technical background with handson experience in security monitoring tools and cloud service security (GCP/AWS Google Workspace SaaS environments).
• Familiarity with secure software development practices vulnerability scanning and threat modeling.

Analytical Skills

• Ability to assess risks prioritize security improvements and document findings clearly and concisely.
• Proficiency in analyzing logs and monitoring tools to identify security incidents.

Communication & Collaboration

• Excellent communication and project management skills to work with crossfunctional teams including developers legal/compliance and operations.
• Capability to provide security training and awareness across the organization.
• Fluency in German and English (both C1).

Leadership & Management

• Proven experience in leading and managing a team of information security professionals.
• Strong leadership skills with the ability to motivate inspire and guide team members.
• Excellent interpersonal and communication skills to build strong relationships within the team and across the organization.
• Experience in performance management including setting goals providing feedback and conducting performance reviews.
• Ability to foster a collaborative and inclusive team environment.

Dont match all the criteria Go for it anyway!

At Everphone we are looking for passionate individuals with vibrant personalities. So if youre excited about this position but dont match every single requirementplease apply anyway. You may well be just the right candidate for another position if not this one so go for it!

Benefits:

• a premium smartphone of your choice for personal use
• 30 vacation days per year
• a monthly budget of 30 in Circula vouchers to spend however you like
• a 300 subsidy for public transport
• two bright modern offices in the heart of Berlin (Mitte and Kreuzberg)
• a dogfriendly office (Kreuzberg) where your fourlegged friend is welcome to join you
• a mental health program with Voiio access for personal and professional solutions also open to family members
• a dynamic work environment where you can actively help shape your own growth
• a hybrid work model for more flexibility
• access to the Everphone Learning Academy to promote professional development
• a referral program with an up to 2000 bonus
• a company pension plan
• social drinks and karaoke night to get to know your colleagues better
• a large open kitchen area with free drinks snacks and fruit
• a relaxation area with sofas and a quiet room to simply unwind.