Principal Information Security Manager

Staffbase

Dresden, Saxony, GermanyFull Time

Operations

Apply with OnJob Free profile · takes about a minute

Principal Information Security Manager at Staffbase is a full time role based in Dresden, Saxony, Germany. Listed skills: Operations. It was published on 1 September 2026 and was open at last check.

Principal Information Security Manager at Staffbase — key details
Role	Principal Information Security Manager
Company	Staffbase
Location	Dresden, Saxony, Germany
Employment type	Full Time
Skills listed	Operations
Published	1 September 2026
Status	Open at last check

<div class="content-intro"><h3>About Staffbase</h3>

We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry-leading and award-winning agentic AI communications channels - intranet, employee app and email solutions - create engaging experiences that connect and empower employees.

Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience. We are proud to be a Unicorn company—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.</div>Our information security program is fit for purpose and operationally sound. The next chapter is about making it investor-ready, AI-efficient, and capable of sustaining enterprise customer trust at scale.

This is not a build-from-scratch role. It is a step up in maturity: fewer manual processes and sharper governance. The position sits at the center of the InfoSec team; you coordinate across teams, own outcomes and represent the function. You are comfortable being the person customers and auditors talk to.  You think in programs and systems, not tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows, and are empowered to drive that change as we build out our AI-driven operating model across the company.

What you’ll be doing

You will act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence.

You report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers. You will own;

Compliance & Audit

<ul>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Own the control framework and ensure it stays current as the business evolves</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Prepare the InfoSec program for investor and M&A due diligence scrutiny</li>

</ul>

Customer Trust

<ul>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Own the response to enterprise customer security questionnaires and RFPs</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Represent Staffbase credibly in customer security reviews, calls, and audits</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality</li>

</ul>

Risk & Vendor Security

<ul>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Maintain the risk register and drive risk treatment decisions with relevant stakeholders</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Own vendor security assessments for critical and high-risk suppliers</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Partner with Procurement and Legal on AI-assisted review workflows</li>

</ul>

Policy & Awareness

<ul>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Own the internal security policy framework, keep it current, understandable, and enforced</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Design and run security awareness programs that change behaviour, not just tick boxes</li>

</ul>

Incident Response

<ul>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Own the incident response plan and lead execution when incidents occur</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Coordinate with Engineering, Legal, and leadership during incidents</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Drive post-incident reviews and close findings with owners</li>

</ul>

What you need to be successful

Essential Experience

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">5+ years of hands-on InfoSec experience in a SaaS or B2B tech company</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Proven ownership of ISO 27001 and/or SOC 2 programs</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Track record of representing InfoSec to enterprise customers, including security reviews and escalations</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Must be fluent in German and English</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations</li>

</ul>

Highly Desirable

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Experience supporting or preparing for M&A or investor due diligence processes</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Background working alongside Legal, Procurement, and Engineering</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Practical understanding of cloud security architecture (enough to challenge and validate, not operate)</li>

<li class="li1" style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent. Certification matters less than what you have built</li>

</ul>

What you'll get

<ul>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Support - we’re offering a company pension scheme</li>

<li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Volunteers Day - you’ll get one day off per year for supporting a social project</li>

</ul><div class="content-conclusion"><h3><img src="https://imgur.com/a/kIbq0q5" alt="" style="max-width: 100%;"></h3></div>

Find

Jobs in Germany

on Arbeitnow

Apply with OnJob Browse more jobs

Create your free OnJob profile to apply — we'll take you to Staffbase's application after sign-up. · Posted 1 Sept 2026.

Principal Information Security Manager at Staffbase — questions answered

What does the Principal Information Security Manager role at Staffbase pay?

Staffbase does not publish a salary on this Principal Information Security Manager listing, so OnJob shows no figure for it rather than an estimate. For what this role pays across the market, the OnJob salary guides aggregate the live listings that do disclose pay.

Where is the Principal Information Security Manager role at Staffbase based?

Staffbase lists this Principal Information Security Manager role in Dresden, Saxony, Germany, advertised as full time work at that location. Larger employers sometimes cover several sites under one city name, so confirm the exact office with Staffbase before you apply.

What skills does the Principal Information Security Manager role at Staffbase require?

The Principal Information Security Manager at Staffbase listing names Operations. Those are the skills the employer put on the posting itself, so they are the ones worth matching in your profile and covering first in an interview.

Is the Principal Information Security Manager role at Staffbase still open?

The Principal Information Security Manager posting at Staffbase was open at OnJob's last check of the employer's careers page, having been published on 1 September 2026. OnJob re-checks source listings on each build and marks a role closed once it disappears, but listings can close without notice, so the employer's own page is the final word.

How do you apply for the Principal Information Security Manager role at Staffbase?

Apply to the Principal Information Security Manager at Staffbase role through OnJob with a free profile: OnJob scores your fit against the listing, shows the skills lowering that score, and submits an ATS-ready profile to Staffbase's own application page. Creating a profile is free and needs no card.

Explore more on OnJob

Find AI-matched jobs More jobs in Dresden Browse jobs by city Salary guide by role Check your resume (ATS)

Hiring for a role like this?

Post a job on OnJob and reach AI-matched candidates.

Post a Job

Principal Information Security Manager

Principal Information Security Manager at Staffbase — questions answered

Related Operations & Support jobs

Explore more on OnJob