The posting
BUILD THE SECURITY FOUNDATION BEHIND PRODUCTS USED BY HUNDREDS OF MILLIONS
At applike group, we build and scale innovative AdTech, mobile-gaming, analytics, and app-growth products used by millions worldwide. With 500+ colleagues across Hamburg, Boston, Tokyo, and Singapore, we are seeking a Senior Group Information Security Manager – Product & Platform to own our group-wide Information Security Management System (ISMS) and drive ISO/IEC 27001 readiness across our application, platform, cloud, data, and product-facing environments.
As a Senior Information Security Manager – Product & Platform, you will report directly to the Head of Legal. You will act as the internal security lead across our product landscape, defining security requirements, driving ISO readiness, and integrating workplace IT controls into one coherent ISMS.
You will lead communication with auditors, certification bodies, authorities, enterprise customers, and other external stakeholders, serving as the bridge between technical engineering, business leadership, and compliance.
WHAT YOU WILL DO:
- Group ISMS & ISO/IEC 27001 Readiness: Own the design, operation, and continual improvement of the group ISMS. Define the ISO/IEC 27001 scope, risk methodology, and Statement of Applicability. Drive ISO readiness across application, platform, cloud, data, and product environments.
- External Stakeholder Management: Lead all communication and management of external auditors, certification bodies, regulatory authorities, customers, and partner security reviews.
- Product, Cloud & Platform Security: Define practical security requirements for apps, APIs, CI/CD pipelines, and cloud infrastructure. Partner with Engineering on secure architecture, vulnerability management, and penetration test remediation.
- Security Governance & Risk: Maintain the group risk register, establish KPIs, and prepare management reviews to support leadership in risk-acceptance decisions.
- Internal IT Oversight: Define security requirements for SSO, MFA, identity, and endpoint management (operated by Group IT), verifying evidence to maintain audit readiness.
- Incident Response: Lead product and platform incident response processes, run tabletop exercises, and ensure continuous resilience improvement.
WHO YOU ARE:
- Experience: 6+ years of experience in information security, product/application security, cloud security, or technology risk—including at least 2–3 years owning a security program, ISMS, product-security domain, or major ISO/IEC 27001 workstream.
- ISO 27001 Expertise: Practical experience implementing or materially operating ISO/IEC 27001 controls in a cloud-native or platform environment (not just supporting an audit). An ISO/IEC 27001 Lead Implementer or Lead Auditor certification is highly preferred.
- Technical Depth: Deep working knowledge of application security, secure development, APIs, cloud infrastructure, CI/CD, vulnerability management, penetration testing, logging, incident response, and data protection.
- Governance & IT Awareness: Working knowledge of identity, endpoint, SaaS, and workplace IT controls to define requirements and evaluate evidence without needing to operate them day-to-day.
- Stakeholder & Communication Skills: Clear, confident communicator across all audiences—from engineers and C-level executives to external auditors and non-technical stakeholders.
- Languages: Fluent in German and English
Certifications & Frameworks That Make You Stand Out:
- Security Certifications: CISM, CISSP, CRISC, CCSP, CISA, or a comparable certification.
- Framework Experience: Hands-on familiarity with SOC 2, BSI IT-Grundschutz, BSI C5, NIS2, or enterprise customer security reviews.
- Domain Background: Experience in AdTech, mobile gaming, high-volume data platforms, or API-driven environments.
FUEL FOR THE JOURNEY: BENEFITS TO SUPPORT YOUR AMBITIONS
- Invest in Your Future: Regular feedback and our development program support your growth, helping you expand your skill set and achieve your career goals.
- Easy Arrival to applike: From signing to settling in Hamburg, we’ve got you covered. Need a visa? No problem. Ready to build your new life and career at applike in Hamburg? We support every ambition - from learning German to a relocation bonus that helps you settle in and make Hamburg feel like home.
- Live Your Best Life, at Work and Beyond: We work in a hybrid setup with 3 core office days, plus flexible working hours. Enjoy 30 vacation days, 3 weeks of remote work per year, and free access to an in-house gym with lots of different fitness classes and mental health support through our Employee Assistance Program (EAP).
- Thrive Where You Work: Enjoy the Alster Lake view from our central office with top-notch equipment, fun open spaces, and a large variety of snacks and drinks.
- Join the Community! Participate in regular team and company events, including hackathons and social gatherings. We work together, and we celebrate together, too.
THE INTERVIEW PROCESS:
- 1st Interview with TA Manager
- 2nd Interview with Senior IT Team Member
- Case Study
- 3rd Interview with General Legal Counsel
- Final get-to-know with MD People & Group Services
Our mission is to create an inspiring work environment for amazing people to achieve extraordinary things. Be part of it!
Skip writing cover letters. Tell us about your most passionate personal project, your desired salary, and your earliest possible start date. We are looking forward to your application!
We welcome applications from people who will contribute to the diversity of our company.
