Head of Security

Role overview

This is a senior security leadership position for a Germany-based candidate. The role sits within a fast-scaling technology environment and is responsible for shaping, expanding, and operationalizing a modern security function.

You will define the security direction for the organization, improve protection across infrastructure and applications, and help establish a security-minded engineering culture. The position blends technical depth, strategic decision-making, incident leadership, and collaboration across teams.

You will work alongside engineering and business stakeholders to strengthen resilience, lower risk, and support continued product and company growth. This role suits a practical security leader who can protect the business without slowing engineering progress.

The position also plays an important part in building trust, improving security maturity, and preparing the organization for changing threat conditions.

Key responsibilities

• Set and continually refine the security roadmap covering infrastructure, application security, internal security, and operational resilience.
• Establish security priorities, policies, procedures, and scalable best practices that can grow with the business.
• Work closely with engineering and infrastructure teams on secure architecture and safe software development practices.
• Improve application security, infrastructure defense, identity and access controls, and supply chain security.
• Advance capabilities for detection, prevention, monitoring, and response to incidents.
• Take the lead during security incidents and provide steady, effective direction in high-pressure situations.
• Assess risks tied to AI-assisted development and other emerging technologies.
• Promote security awareness through training, collaboration, and practical guidance.
• Support customer security conversations, reviews, and trust-building initiatives.
• Hire, coach, and develop security talent while raising technical standards across the function.
• Create security processes and tooling that improve reliability without adding unnecessary complexity.
• Serve as a strategic partner across the organization and help foster accountability and trust.

Requirements

• Strong track record of leading security functions or security programs in technology-focused companies.
• Deep experience in both infrastructure security and application security.
• Hands-on involvement in real security incidents, including response coordination.
• Solid knowledge of secure development practices, supply chain security, identity management, and infrastructure protection.
• Ability to balance strong security controls with engineering speed and business needs.
• Experience creating scalable security processes, controls, and operating models.
• Strong understanding of cloud systems, distributed architectures, and modern engineering workflows.
• Experience with AWS, developer platforms, fintech, mobile, or payments environments is an advantage.
• Excellent communication skills and the ability to collaborate with engineers, executives, customers, and cross-functional partners.
• Practical, hands-on leadership style with strong ownership, problem-solving ability, and comfort in ambiguous settings.
• Experience building and scaling security teams is highly regarded.

Benefits

• Remote-first role with flexible working arrangements.
• Competitive compensation with equity potential.
• Chance to shape security strategy in a fast-growing technology company.
• Work environment built on trust, autonomy, and ownership.
• Suggested yearly leave of 4 to 5 weeks for rest and recovery.
• Equipment budget to support your workspace setup.
• Annual budget for learning and professional development.
• Opportunity to influence security practices for products used by a global customer base.
• Exposure to a distributed international team focused on innovation and engineering quality.

Additional information

This opportunity is listed on behalf of a partner company, and that partner handles applications and the next stages of the process.

Applications are reviewed through an AI-assisted matching workflow that ranks candidates against the role’s core requirements. The shortlist is then sent to the hiring company, while the final decision and interview steps are managed internally by the employer.

By applying, candidates acknowledge that personal data will be processed for candidate evaluation and shared with the hiring employer under applicable data protection rules, including GDPR, on the basis of legitimate interest and pre-contractual measures.

The recruitment process may also use AI tools to support tasks such as application review, resume analysis, response assessment, and identification of inconsistencies or verification signals. These tools assist recruiters and do not replace human judgment; final hiring decisions are made by people.