Senior Information Security Manager – Product & Platform (f/m/d)

The role

You will own the group-wide Information Security Management System and drive ISO/IEC 27001 readiness across application, platform, cloud, data, and product-facing environments. You will act as the internal security lead, defining requirements and managing communication with external auditors and stakeholders.

What you will do

• Own the design, operation, and continual improvement of the group ISMS
• Define the ISO/IEC 27001 scope, risk methodology, and Statement of Applicability
• Lead communication and management of external auditors, certification bodies, regulatory authorities, customers, and partner security reviews
• Define practical security requirements for apps, APIs, CI/CD pipelines, and cloud infrastructure
• Partner with Engineering on secure architecture, vulnerability management, and penetration test remediation
• Maintain the group risk register, establish KPIs, and prepare management reviews
• Define security requirements for SSO, MFA, identity, and endpoint management
• Lead product and platform incident response processes and run tabletop exercises

Required qualifications

• 6+ years of experience in information security, product/application security, cloud security, or technology risk
• 2–3 years owning a security program, ISMS, product-security domain, or major ISO/IEC 27001 workstream
• Practical experience implementing or materially operating ISO/IEC 27001 controls in a cloud-native or platform environment
• Deep working knowledge of application security, secure development, APIs, cloud infrastructure, CI/CD, vulnerability management, penetration testing, logging, incident response, and data protection
• Working knowledge of identity, endpoint, SaaS, and workplace IT controls
• Fluent in German and English

Nice to have

• ISO/IEC 27001 Lead Implementer or Lead Auditor certification
• CISM, CISSP, CRISC, CCSP, CISA, or a comparable certification
• Hands-on familiarity with SOC 2, BSI IT-Grundschutz, BSI C5, NIS2, or enterprise customer security reviews
• Experience in AdTech, mobile gaming, high-volume data platforms, or API-driven environments

Benefits

• Regular feedback and development program
• Visa support
• Relocation bonus
• Hybrid setup with 3 core office days
• Flexible working hours
• 30 vacation days
• 3 weeks of remote work per year
• Free access to an in-house gym with fitness classes
• Mental health support through Employee Assistance Program (EAP)
• Central office with Alster Lake view
• Top-notch equipment
• Snacks and drinks

Before you apply

• Tell us about your most passionate personal project
• Tell us your desired salary
• Tell us your earliest possible start date

About the company

applike group builds and scales innovative AdTech, mobile-gaming, analytics, and app-growth products used by millions worldwide. They have 500+ colleagues across Hamburg, Boston, Tokyo, and Singapore.