Senior Information Security Officer – Hybrid (Germany). Kiteworks is seeking a Senior Information Security Officer to join the global security and compliance team. You will lead audits, perform risk analyses, and drive security improvement initiatives across IT and cloud security, supporting our growing compliance program as Kiteworks expands to new jurisdictions. Reporting to the Global IT CISO, you will work independently and lead team projects, collaborating with IT and development to balance security with business growth. Responsibilities include owning external security audits (ISO 27001, BSI C5, SOC 2), performing gap analyses, updating information security procedures across the organization, and acting as the domain owner for identity and access management and supplier management. You will execute control tasks, use AI to automate recurring processes, coordinate with control owners, and manage security incidents. You will also participate in weekly security meetings and help onboard newly acquired companies to the global program. What you’ll bring: at least five years of information security and compliance experience; experience with ISO 27001 and information security management systems; experience with BSI C5 or SOC 2, audits, and risk analysis; identity and access management expertise; GDPR knowledge; familiarity with IT and software development; interest in AI; experience in a tech company preferred; pragmatic problem-solving, ability to work independently, strong collaboration, and fluent English. Work location: Hybrid, with three days in the Regensburg or Munich

Senior Information Security Officer – Hybrid (Germany). Kiteworks is seeking a Senior Information Security Officer to join the global security and compliance team. You will lead audits, perform risk analyses, and drive security improvement initiatives across IT and cloud security, supporting our growing compliance program as Kiteworks expands to new jurisdictions. Reporting to the Global IT CISO, you will work independently and lead team projects, collaborating with IT and development to balance security with business growth. Responsibilities include owning external security audits (ISO 27001, BSI C5, SOC 2), performing gap analyses, updating information security procedures across the organization, and acting as the domain owner for identity and access management and supplier management. You will execute control tasks, use AI to automate recurring processes, coordinate with control owners, and manage security incidents. You will also participate in weekly security meetings and help onboard newly acquired companies to the global program. What you’ll bring: at least five years of information security and compliance experience; experience with ISO 27001 and information security management systems; experience with BSI C5 or SOC 2, audits, and risk analysis; identity and access management expertise; GDPR knowledge; familiarity with IT and software development; interest in AI; experience in a tech company preferred; pragmatic problem-solving, ability to work independently, strong collaboration, and fluent English. Work location: Hybrid, with three days in the Regensburg or Munich