(Senior) Information Security & Compliance Expert (m/f/d)

Bridge between Information Security & Product Analyze new and existing requirements for information security and compliance (including ISO 27001, ISMS, NIS2, DORA) and translate them together with the product team into clear, practical product functionalities. Develop professional content, workflows and decision-makers that convey regulatory requirements in a comprehensible, applicable and user-oriented manner. Bring your expertise into the product strategy and support product management in prioritizing and developing relevant topics. Help to prepare complex requirements so that concrete and implementable product requirements are created. Collaboration in the product team Work closely with Product Management, UX and Engineering. Ensure that requirements from information security and compliance are not only implemented correctly, but can be used in a comprehensible and practical way for users. Promote a common understanding of regulatory requirements within the product team. Bring new developments and best practices from information security to product development at an early stage. Sales & Customer Success support Accompany sales at customer talks as a specialist contact for questions about information security, compliance and the implementation of these topics in our product. Support our sales and customer-success teams to communicate regulatory requirements securely and understandably to prospects and customers. Create materials, guides and training content that enable internal teams to work professionally and customer-oriented. Marketing and Thought Leadership Research, structure and prepare topics from information security and compliance for webinars, white papers, blog articles, specialist contributions or campaigns. Position yourself and caralegal as a competent voice for information security, compliance and digital regulation. Identify relevant regulatory developments and translate them into understandable and useful content for different target groups.

A completed study in the field of information law, economic law, data protection law, IT law or comparable. 2–5+ years of relevant professional experience in the company, ideally in the field of information security, IT compliance, governance, risk & compliance (GRC) or a comparable environment. Understanding information security standards and regulatory requirements, in particular ISO 27001, ISMS and ideally NIS2. Ability to prepare complex technical and regulatory requirements for different target groups. Experience in cooperation with various stakeholders and the mediation between specialist areas. Embossed communication and presentation skills. Structured, independent working and high quality standards. Ideally experience in the environment of digital products, SaaS or B2B software companies. Knowledge of adjacent regulatory areas such as GDPR, AI regulation, DORA or Data Act are advantageous. Current knowledge of German and English. Home in Germany.

We offer you varied and responsible tasks with plenty of design space. We are a small international team with flat hierarchies and short communication paths. We offer you a collaborative and open corporate culture where your ideas are appreciated and your strengths are promoted. We offer you flexible working hours with the ability to work remotely. We offer a fair remuneration package consisting of fixed and commission. We will grant your occupational pension. We like our modern workplace equipment in the immediate vicinity of the main railway station. We love parties: team and company events as well as regular get-togethers. .