Information Security & Compliance Manager, Room Price Genie

• You have a solid understanding of information security principles and best practices and 1+ years of relevant experience, e.g., gained in Big4, IT consulting, or a fast-growing startup or scale-up
• We do not need someone super senior since the hotel software industry has no specific regulations. It's a fairly standard use case, but we take security very seriously and want to demonstrate this to our customers
• You have solid experience with the ISO27001 certification
• You're familiar with cloud security (AWS) and the security challenges of modern web applications
• You have a proven track record of implementing and managing security controls and technologies
• You're comfortable with risk assessment, vulnerability management, and incident response processes
• You're a strong communicator who can explain technical security concepts to technical and non-technical audiences at various levels
• You're fluent in English
• You have a proactive, hands-on mentality and are excited to build and shape security in a dynamic startup environment

Desirable

• As an Information Security & Compliance Manager at RoomPriceGenie, you'll enter an exciting, fast-paced role at a rapidly growing B2B SaaS company
• You'll work directly with the CTO and management
• Your first big project will coordinate our efforts to get the ISO27001 certification
• Drive our security strategy and roadmap: Develop and implement practical, scalable security and compliance policies and procedures that align with our rapid growth and business objectives
• Lead our security and compliance efforts: Proactively identify and mitigate security risks across our infrastructure, applications, and data
• Be the go-to person: manage stakeholders like internal and external auditors, certification companies, German authorities or similar
• Architect and implement security solutions: Evaluate, deploy, and manage security tools and technologies that fit our evolving needs, focusing on cloud security
• Navigate the compliance landscape: Ensure we meet relevant regulatory requirements and industry best practices in a pragmatic way
• Empower our teams with security awareness: Foster a balanced security-first culture through engaging training and communication
• Lead incident response efforts: Develop and execute effective plans to handle and learn from security incidents
• Collaborate closely with the IT Ops team: Integrate security seamlessly into our IT landscape and lifecycle
• Stay ahead of the curve: Continuously research the latest threats and trends to keep our defences strong