Director of Information Security & Sovereign Operations, LiveEO

• This is a high-impact role for someone who thrives in fast-paced, regulated, and technically complex environments
• German nationality (due to customer and compliance requirements)
• 10+ years of experience in information security, IT governance, or risk & compliance roles
• Proven success with BSI certification or audit projects
• Familiarity with SOC2, ISO 27001, or NIST 800-53 frameworks
• Strong understanding of cloud-native security, especially AWS
• Excellent cross-functional communication skills
• Fluency in German and English

Desirable

• LiveEO is seeking a high-impact leader to lead and scale our global security organization. You will oversee the company's information security architecture across our international commercial branch and our high-assurance, government-facing operations. This role is central to scaling our Sovereign Branch - dedicated to regulated institutional partners and critical infrastructure - ensuring full compliance with BSI IT-Grundschutz and international high-integrity standards
• You will act as the global director of our Information Security Management System (ISMS) and central contact point for all matters related to security compliance, audits, certifications, and risk governance, both internally and externally, ensuring that our systems and data meet the highest standards of integrity, confidentiality, and availability
• Lead and evolve LiveEO’s global ISMS, ensuring it meets standards for high-assurance data handling and international frameworks like ISO 27001 and SOC2
• Design and enforce internal IT security & access policies and controls as well as risk management procedures
• Lead the technical and organizational implementation of restricted-access silos within our cloud-native environment
• Drive implementation and successful audit for e.g. BSI certification, renew certification of SOC2 Type II and ISO27001. Ready LiveEO to meet addional security and quality standards
• Provide functional leadership, support audit readiness and lead interactions with certification bodies and government bodies
• Partner with HR to manage the personnel reliability & vetting processes for all technical and administrative staff
• Execute regular technical audits of the sovereign-hosted environments configurations to ensure compliance independence
• Promote a culture of security through internal training, awareness programs, and process ownership
• Lead the technical forensic investigation and mandatory reporting for any security incidents involving critical-tier data assets
• Monitor evolving legal and regulatory requirements and adapt policies accordingly
• Evaluate new technologies and vendors for security posture and compliance risks