Are you an experienced information security professional looking to make a real impact across a decentralized organization? Whether your background is in an ISO or CISO role, you'll have the opportunity to shape our information security strategy, drive the development of our ISMS, and work closely with teams to turn security requirements into practical, sustainable solutions. At Open-Xchange (OX), we develop open-source communication and collaboration software used by public sector organizations, telcos, and hosting providers to keep data secure and under their control. We value expertise and continuous professional development. Working closely with Engineering, Cloud Operations, and IT Architecture, you'll help embed information security as an integral part of our products and processes. You'll create transparency around technical and organizational security measures, continuously develop our Information Security Management System (ISMS), and advise our Management Board on relevant information security matters. Harmonize security requirements and processes across different software landscapes, taking varying levels of maturity and risk profiles into account. Support product cells in identifying and assessing information security risks, document the assessment results within the ISMS, and recommend appropriate measures and risk-based priorities in close coordination with the relevant risk owners. Embed Security by Design across our product portfolio, working closely with DevSecOps and product cells to define security requirements and risk-based priorities early in the development process,



including through joint information security sprints. Capture and negotiate customer information security requirements and align them with the relevant product cells and business functions. A degree in Computer Science, Business Information Systems, IT Security, or a comparable qualification, such as several years of relevant professional experience in information security, IT risk management, or IT compliance. Practical experience in establishing, implementing, and certifying an Information Security Management System (ISMS) in accordance with ISO 27001. Knowledge of the German BSI IT-Grundschutz framework is a plus. A solid understanding of software and cloud architectures, secure software development, and technical security measures, as well as experience working with engineering, architecture, and operations cells. A structured and analytical approach, combined with practical experience in assessing information security risks and deriving appropriate measures and priorities. You are also able to assess customer information security requirements, represent them clearly, and coordinate them with product cells and customer-facing functions. Excellent written and spoken German and English. The flexibility to work 100% remotely ensures a work environment that suits you best. Versátil

working hours
that allow you to successfully combine your home and family responsibilities with work. Time off to volunteer – and mental health support when you need it. Join us in our fight for an open internet and deliver added value

📌 (Chief) Information Security Officer (España)
🏢 Open-Xchange
📍 España