View Jobs

Information Security Governance Expert  Location: Duisburg Join a security-focused international environment as Information Security Governance Expert, supporting the development and oversight of information security frameworks within highly regulated and security-sensitive operations. In this role, you will contribute to governance initiatives, risk management activities, and the implementation of security standards across international projects. Key Responsibilities: Support the implementation and continuous development of information security governance frameworks. Develop and maintain security policies, standards, and procedures. Ensure compliance with national and international security requirements and regulations. Conduct risk assessments, protection requirement analyses, and support mitigation planning. Prepare KPI reporting and support audit and assessment activities. Collaborate with internal stakeholders, auditors, and international partners on security-related initiatives. Contribute to IT and security projects from a governance and compliance perspective. Advise business and technical teams on information security requirements and best practices. Your Profile: Degree in IT security, computer science, or a related discipline. Several years of experience in information security governance or compliance environments. Familiarity with recognised security standards and frameworks such as ISO 27001, CMMC, or similar. Experience in highly regulated or security-sensitive environments is advantageous. Certifications such as CISSP, CISM, or ISO 27001 are beneficial. Strong analytical, communication, and stakeholder management skills. Structured and solution-oriented working style. What’s on Offer? A security governance role within an international and highly regulated environment. Exposure to complex security and compliance topics. Opportunity to work closely with international stakeholders and strategic projects. Long-term professional development opportunities within information security governance.

Threat Intelligence Expert Frankfurt  We are seeking a Threat Intelligence Business Expert to join the Cyber Security Division of a leading financial service provider in Frankfurt. You will be responsible for delivering high-quality intelligence products, engaging with internal security teams, and contributing to the company’s intelligence-led security posture across a fast-moving and complex threat environment. Key Responsibilities  Produce tactical, operational, and strategic threat intelligence products for technical and non-technical audiences including SOC, Incident Response, Risk, and senior management. Analyse threat actor activity targeting the financial sector Manage and optimise threat intelligence feeds and platforms, supporting integration with SIEM and SOAR tooling. Engage with internal stakeholders across Vulnerability Management, Red Team, and Compliance to ensure intelligence drives operational outcomes. Support DORA-aligned ICT risk reporting and contribute to the continuous improvement of intelligence processes and workflows. Key Requirements  5–7 years of cyber security experience Strong knowledge of the threat landscape relevant to financial institutions, including e-crime, ransomware, fraud, and account takeover. Proficiency with the MITRE ATT&CK framework and structured analytic techniques. Awareness of DORA and BaFin regulatory expectations for cybersecurity within EU financial institutions. Relevant certifications desirable: CREST CTIA, GIAC GCTI (FOR578), or equivalent. Fluent in both German and English  

Technical Vulnerability Management Expert | Germany Our client is a major European bank looking for a Technical Vulnerability Management Expert to join their growing Cyber Hygiene function. This is a hands-on technical role with end-to-end ownership of vulnerability management topics, working closely with internal stakeholders across the organisation. The role is based in Germany with quarterly travel to a European office. Key Responsibilities Own and drive technical vulnerability management topics end-to-end. Define and establish clear technical interfaces across internal workstreams. Analyse and interpret vulnerability reports and translate findings into actionable recommendations. Support system hardening and patch management processes. Collaborate with and onboard new technical domains into the vulnerability management framework. Drive requirements engineering in an agile environment. Coordinate small-scale technical projects across internal and external stakeholders. Your Profile Deep technical expertise in vulnerability management, ideally including system hardening and patch management. Strong understanding of open-source vulnerability tooling and CVE analysis. Familiarity with regulatory requirements relevant to vulnerability management. Able to communicate technical topics clearly to both technical teams and management. Comfortable working independently in a build-out environment. Experience in agile working methods and requirements engineering. Fluent German and English.

  Senior IAM Architect Our client is a large international organisation seeking an Enterprise Security Architect to join their Group Information Security function, with a focus on Identity and Access Management. You will sit within the Security Architecture department, responsible for the domain-specific development and ongoing enhancement of a group-wide security architecture, with the goal of ensuring and continuously improving IT security and cyber resilience across the organisation. Key Responsibilities: Analyse cybersecurity IAM trends relevant to the organisation, including regulatory developments and emerging technologies such as AI, Cloud and Non-Human Identities Produce IAM-specific risk assessments as part of technical security architecture design, covering cost, benefit and risk reduction Evaluate IAM threat scenarios and design high-level IAM security architectures, including standards, baselines and reusable artefacts such as patterns and blueprints Drive stakeholder alignment and steer solution design and implementation as subject matter expert, including presenting in group-wide security forums Assess IT security posture against best practices and provide actionable recommendations aligned to ISO and NIST frameworks Your Profile: Degree in Computer Science or a comparable qualification Extensive experience in the Identity and Access Management domain, ideally including proven delivery of IAM architecture within large organisations Strong background in security architecture roles, covering both technology-specific and enterprise-level architecture including target state definition and roadmaps Hands-on experience with IAM platforms and tooling, ideally including: IAM: Microsoft Entra ID / Active Directory, Ping Identity, Okta PAM: CyberArk / BeyondTrust IGA: SailPoint / Oracle OIG Zero Trust: NIST 800-207 Understanding of attacker mindset and offensive security; certifications such as OSCP, CEH or equivalent are advantageous Ability to work independently and take ownership of complex technical topics Strong problem-solving mindset with a structured, solution-oriented approach Fluent in English; German language skills are an advantage

Penetration Tester Location: Frankfurt Our client is a large international organisation seeking a Penetration Tester to join their information security team. You will join the information security team, helping to ensure products and projects are delivered securely. Key Responsibilities: Plan, execute and track penetration tests, evaluating findings and proposing mitigation actions. Produce clear test reports and maintain statistics for reporting and tracking purposes. Provide technical support to security functions including SOC, risk management and architecture. Coordinate activities such as bug bounties, SAST, DAST, audits and vulnerability scanning. Contribute to secure coding training and awareness initiatives. Serve as the internal point of contact for all penetration testing queries and follow up on findings. Your Profile: Degree in Computer Science, Business Informatics or equivalent IT experience. At least 3 years of hands-on penetration testing experience. Solid understanding of the cyber threat and vulnerability landscape. Certifications such as CompTIA PenTest+, CEH, GPEN or OSCP are advantageous. Self-driven and results-oriented, with the ability to work independently. Advanced English proficiency; additional languages are a plus.

Director of Software Location: Berlin, Munich, Heidelberg (Hybrid) Our client is seeking an experienced engineering leader to head a large-scale software organisation spanning SaaS solutions and core platform frameworks. This is a senior leadership role with significant strategic influence, driving cloud product development and organisational excellence across a distributed, cross-functional engineering function. Key Responsibilities: Own and lead a large engineering organisation, setting the direction for SaaS product development and shared platform capabilities across multiple product lines. Co-define and execute the strategic technology roadmap in close partnership with executive leadership. Ensure regulatory and compliance requirements are embedded rigorously throughout the product development lifecycle. Lead and develop senior engineering leaders, driving continuous improvement in scalability, quality, and innovation. Represent the engineering function at executive and stakeholder level, building strong relationships internally and externally. Requirements: Proven leadership experience at Director, VP, or CTO level within SaaS product development, with accountability for large, distributed organisations. Degree-level education in Computer Science, Engineering, or a related technical discipline. Deep expertise in cloud architecture and SaaS platforms; familiarity with regulated software environments is a strong advantage. Excellent English communication skills; German language skills are a plus. Strategic thinker with strong execution capability and a track record of leading complex organisations through transformation. What's on Offer? Flexible working. Vibrant office locations with regular company events. Access to an in-house academy and external learning partners. Corporate perks, job bike scheme, company pension, and more.