> Markdown version of [/jobs/ext/2893887-head-of-information-security](https://www.wearedevelopers.com/jobs/ext/2893887-head-of-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Information Security - **Company:** Constructor TECH - **Location:** Germany (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Business Software, Business Systems, Software as a Service, Cloud Computing Security, Code Review, Cyber Security, Continuous Integration, DevOps, Network Architecture, Cloud Services, Cloud Platform System, Office365, Software Security, Kubernetes - **Published:** September 14, 2026 - **Apply:** https://www.adzuna.de/details/5881130882 ## About the Role * 8+ years in information security, including 3+ years in a leadership role, preferably in all-remote or hybrid international organizations * Track record running application security programs, ideally with CI/CD-integrated tooling and modern (AI-assisted) code review * Hands-on experience with ISO 27001 and/or SOC 2, proven experience leading and successfully completing the audit, not just reading the standard * Experience securing business applications (M365, CRM, ERP) and vendor risk management * Ability to explain risk and trade-offs clearly to both engineers and executives * Comfortable operating with a small team and prioritizing across competing demands * Working knowledge of Kubernetes and cloud security; sovereign cloud experience is a plus ## Description With strong expertise in machine intelligence and data science, Constructor's all-in-one platform for education and research addresses today's pressing educational challenges: access inequality, tech clutter, and low engagement of students. Please send your resume in English only. About the Role We're looking for a Head of Cybersecurity to expand and lead our security function across four areas: application security, security compliance, infrastructure & cloud security, and business application security. You'll take over a small existing security team, with a mandate to grow it as the company scales. This is a hands-on leadership role. You'll set direction and represent security to leadership, but you're also expected to dig into technical detail with engineering, IT, and compliance teams., * Build and run our AppSec program, including agentic/AI-assisted security reviews of code and pull requests * Integrate security checks into CI/CD pipelines so vulnerabilities are caught before production * Run developer security training and champion secure coding practices org-wide * Evaluate and roll out AI coding tools in ways that improve, not undermine, code security Security compliance * Own ISO 27001 and SOC 2 certification and ongoing security audits * Collect requirements from stakeholders and build a roadmap for additional certifications as the business requires them * Maintain policies, controls, and evidence in a way that scales without slowing teams down Infrastructure & Cloud Security * Work closely with our DevOps organization to secure our Kubernetes infrastructure and cloud environments, including sovereign cloud deployments * Define security standards for infrastructure-as-code, network architecture, and access control * Partner with Engineering teams on secure-by-default configurations Business Application Security * Work closely with IT and Business application teams to secure Microsoft 365 and other line-of-business systems, including CRM and ERP * Own identity, access, and data protection controls across business applications * Manage third-party/vendor risk for business-critical SaaS, * Choice of work equipment (e.g., laptop, monitor, etc.) * English classes (iTalki - $130 monthly) * Flexible schedule (we usually work between 09:00/10:00 and 18:00/19:00) * Newborn bonus (€500 per child) * Patent remuneration * Paid leave * Remote work in locations without our offices * Hybrid work in locations with offices (2 days in-office, 3 days remote) ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Where to Find German Tech Jobs](https://www.wearedevelopers.com/magazine/366-where-to-find-german-tech-jobs) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [How to Find Tech Jobs in Berlin](https://www.wearedevelopers.com/magazine/291-how-to-find-tech-jobs-in-berlin)