Principal Information Security Manager

About the role

<div class="content-intro"><h3><strong>About Staffbase</strong></h3> <p>We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first <strong>AI-native Employee Experience Platform</strong>. Our<strong> industry-leading and award-winning agentic AI communications channels</strong> - intranet, employee app and email solutions - create engaging experiences that connect and empower employees.</p> <p>Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience.<br>We are proud to be a&nbsp;<strong data-stringify-type="bold">Unicorn</strong>&nbsp;company—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.</p></div><p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Our information security program is fit for purpose and operationally sound. The next chapter is about making it investor-ready, AI-efficient, and capable of sustaining enterprise customer trust at scale.</span></p> <p><span style="font-family: arial, helvetica, sans-serif;"><span style="font-size: 14pt;">This is not a build-from-scratch role. It is a step up in maturity: fewer manual processes and sharper governance.<br><br></span><span style="font-size: 14pt;">The position sits at the center of the InfoSec team; you coordinate across teams, own outcomes and represent the function. You are comfortable being the person customers and auditors talk to.&nbsp;<br><br></span><span style="font-size: 14pt;">You think in programs and systems, not tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows, and are empowered to drive that change as we build out our AI-driven operating model across the company.</span></span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><strong>What you’ll be doing</strong></span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">You will act as the senior deputy for InfoSec within our Finance &amp; Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">You report directly to the SVP Business Operations &amp; Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers.<br><br>You will own;</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><strong>Compliance &amp; Audit</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif;"><span style="font-size: 14pt;">Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation</span></span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Own the control framework and ensure it stays current as the business evolves</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Prepare the InfoSec program for investor and M&amp;A due diligence scrutiny</span></li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><strong>Customer Trust</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Ow

Skills