Principal of Information Security (f/m/d)

Principal of Information Security (f/m/d)

Location: Munich
Employment Type: Full time
Location Type: Hybrid
Department: Central Operations

Compensation: €120K – €135K • €120K – €180K Equity

We see the potential inside everything and everyone. Starting with you. Orbem uses AI to industrialize MRI, delivering non-invasive insight into everything from fruits to eggs to the human body. We are transforming what is becoming the world's largest biological dataset into actionable intelligence to reduce waste, increase quality, and accelerate the shift toward a more sustainable and healthier future.

Your Role

• You will own Orbem’s Information Security function end-to-end at a pivotal moment. ISO 27001 certification was achieved in December 2025. We are entering an active stabilization phase: controls are established, our external provider stack is being restructured, and a re-audit sits on the horizon. You will inherit this reality — and the authority to shape it.
• This is a hands-on, senior security practitioner role that shapes a security function, not just runs one. You thrive in ambiguity, make high-stakes strategic calls with incomplete information, and can perform operational work while orchestrating an external provider stack. You are also required to support day-to-day security operations.

Strategy & Program Ownership (≈ 40%)

• Lead approach to upcoming ISO 27001 re-audit; assess, recommend, and execute

  Maintain information security strategy aligned with company stage, customers, and risk appetite

  Own information security risk register end-to-end; run risk review with leadership

  Represent Orbem externally with auditors, customer security teams, and regulators in CISO capacity

  Advise leadership on information security risk in product, GTM, and expansion decisions

  Hands-On Execution (≈ 40%)

  Operational security processes: risk management across vendors, embedding security in workflows, translating controls to practice

  Develop and implement material controls; operationalize and consolidate as needed

  Own ISMS governance: control reviews, evidence collection, management reviews, internal audits

  Lead incident response as incident commander with Security Engineering as co-lead

  Draft policies and communications; author security-related writings

  External Stack & Lateral Leadership (≈ 20%)

  Manage external security stack: audits, data protection advisory services, MSSP, pen testing, ISMS/compliance platform

  Decision and ongoing relationships with providers; collaborate with Security Engineering

  Build a Security Ambassadors network across business teams

  Leverage AI and automation for compliance evidence, vendor review, policy drafting, training

How You Fit In

This is an individual contributor role at Principal level. You will interact with General Counsel, Corporate Operations, Procurement & Supply Chain, and the Security Engineering team, and engage with the executive team on security decisions.

Experience and Skills

• Scale-up security leadership experience; you have been a top security leader at a mid-to-large company
• ISO 27001 lived experience; guided a company through an ISO 27001 cycle
• Hands-on operator; comfortable setting up processes, controls, policies, workshops
• Comfort with minimal headcount; motivated to be in the room and drive decisions
• Resilience and ownership of outcomes; can make tough calls under time pressure
• Strong communication: translate risk to business decisions and technical details

What Makes You Stand Out

• Experience navigating an ISO 27001 re-audit
• Familiarity with GDPR, NIS2, EU AI Act; understanding US frameworks (SOC 2)
• Deep-tech/AI/ML or industrial product context; security for hardware/edge devices
• Experience working with external security/compliance providers
• Comfort with AI-first working; using AI to enhance productivity

Our Values

• We Own Every Challenge
• We Strive for Better
• We Imagine New Frontiers

What We Offer

• International environment with 40+ nationalities
• Stock options and relocation support to Germany
• Learning & development budget, fitness membership, caregiver support
• Deutschland Ticket for public transport; flexible hours & home office
• WFH perks, 30 days paid leave, personal leave; work-from-anywhere up to 60 days/year
• Make a difference in a fast-growing, breakthrough technology company

Compensation

€120K - €135K with equity; compensation range updated to €120K - €180K equity.

Apply to join Orbem and help build a healthier, more sustainable future.