> Markdown version of [/jobs/ext/1417813-lead-it-operations-cyber-security-and-compliance-all-genders](https://www.wearedevelopers.com/jobs/ext/1417813-lead-it-operations-cyber-security-and-compliance-all-genders). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead, IT Operations, Cyber Security and Compliance - All Genders - **Company:** Doodle - **Location:** Berlin, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software as a Service, Cyber Security, Cursor (Graphical User Interface Elements), Identity and Access Management, Information Technology Operations, User Provisioning Software, Okta, Casper Suite, SentinelOne Expertise - **Published:** July 24, 2026 - **Apply:** https://www.adzuna.de/details/5812735862 ## About the Role We are looking for a leader who combines deep security and compliance expertise with the operational instincts to run IT for a fast moving SaaS business. Security & Compliance Expertise * Proven experience owning multi framework compliance programmes such as SOC 2, ISO 27001, ISO 42001, or HIPAA. * Experience serving as a Privacy Officer or managing GDPR/FADP obligations directly. * Strong understanding of EDR, MDM, IAM/SSO, and CASB/SSE tooling in a live production environment. Governance & Risk * Experience building AI governance frameworks, including emerging regulation such as the EU AI Act. * Comfortable running a live risk register and structured vendor due diligence process. * Able to assess and manage risk from external contributors and third party tools. IT Operations Leadership * Experience leading a lean IT team supporting 100+ employees across multiple locations. * Hands on with the full employee lifecycle: onboarding, offboarding, access provisioning, device management, and service desk. * Comfortable owning a SaaS portfolio and driving tooling decisions such as CLM platform selection. Communication & Stakeholder Management * Able to translate technical risk into business language for CEO and CFO audiences. * Comfortable presenting security posture at board level. * Strong cross functional partner to PeopleOps, Legal, and external DPO relationships. Nice to Have * Experience supporting enterprise customers in regulated verticals such as government, energy, or healthcare. * Experience with Netskope or similar SSE platforms. * Experience automating IT workflows using tools such as Linear. * Background in a high growth B2B SaaS environment. ## Description As Lead, IT Operations, Cyber Security and Compliance, you will own security, compliance, and IT operations across Doodle. AI Governance * Design and own Doodle's AI governance framework. * Cover agentic AI security controls, EU AI Act assessment, and MCP and Cursor risk management for external contributors. * Build out policy, the risk register, and technical enforcement through our SSE platform, currently evaluating Netskope. Board & Leadership * Author board level cybersecurity posture presentations using the NIST CSF 2.0 framework. * Translate technical risk into business language for the CEO and CFO. Compliance Programmes * Own and drive SOC 2 Type II, HIPAA, ISO 27001, and ISO 42001 programmes at the same time. * Serve as Privacy Officer, managing GDPR and Swiss FADP obligations, the DPA portfolio, and the external DPO relationship. Security Stack * Operate and evolve Doodle's full security toolset: SentinelOne and CrowdStrike for EDR, Jamf Pro for MDM, Okta and JumpCloud for IAM and SSO, Proofpoint PPS for email security (extending to Slack), and KnowBe4 for security awareness. * Led the EDR migration from CyberReason. * Operate Netskope as our CASB and SSE layer. Vendor & Risk * Run a structured vendor due diligence programme: SOC 2 reviews, security questionnaires, code of conduct sign offs. * Support enterprise customers across government, energy, and healthcare. * Maintain a live risk register in Linear across 10+ active items. IT Operations * Lead a lean IT team supporting 100+ headcount across Berlin, remote EU, and our contractor base. * Own the full lifecycle: onboarding and offboarding, access provisioning through Okta, a SaaS portfolio of around 30 tools, device management, and the service desk. * Maintain a compliance audit trail for SOC 2 throughout. Process & Tooling * Built and automated a joint IT and PeopleOps onboarding workflow, from email to Linear ticketing with an NDA hard gate, cutting ad hoc access requests and strengthening contractor governance. * Evaluated and drove CLM tooling selection between Juro and Ironclad to enable self serve enterprise contract acceptance. ## Related Videos - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [How One Developer Built the Back Office for 10 Million Companies](https://www.wearedevelopers.com/videos/100082-how-one-developer-built-the-back-office-for-10-million-companies) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) ## Related Articles - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)