Information Security Manager

September 2026 | Remote |Spain

STRONG NETWORK. STRONG TEAM.

Become part of one of Europe's leading networks for checkout and digital marketing services. More than 3,000 European partner shops trust our high-quality e-commerce solutions to enhance their business. How? By innovatively integrating artificial intelligence into online marketing. Now it's your turn: Enrich our teams with your ideas, energy, and personality.

YOUR RESPONSIBILITIES

• Maintain and enhance our security documentation and Information Security Management System (ISMS), while helping build a strong trust and security framework for partners
• Manage partner security assessments and questionnaires, creating reusable documentation and standardized responses
• Lead the vulnerability management lifecycle, including visibility, remediation coordination with internal teams, and reporting
• Assess our AWS environment, recommend security improvements, and provide guidance on cloud security topics such as IAM, network security, logging, and encryption
• Serve as the main security point of contact for developers and Corporate IT, supporting secure design reviews, threat modeling, endpoint security, identity management, and SaaS security
• Coordinate external penetration tests, support GDPR-related initiatives with our Legal team, and contribute to ISO 27001 and/or SOC 2 readiness efforts.

YOUR PROFILE

• At least 5 years of experience in Information Security, combining hands-on technical work with governance, risk, and compliance responsibilities
• Strong knowledge of AWS security principles and services, including IAM, network security, logging, and encryption
• Experience managing vulnerability management processes and working with security tools and remediation workflows
• Familiarity with ISMS frameworks and security standards, ideally ISO 27001 and/or SOC 2
• • Good understanding of GDPR and data protection concepts, with experience creating documentation and partner-facing responses.
• Structured, self-organized, and comfortable driving initiatives across teams in an international environment

It's a plus if you have:

• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer, or AWS Security Specialty

• Experience with security questionnaires, audits, or partner assessments

• A background in Software Development, DevOps, Platform Engineering, or Corporate IT security.

  • Familiarity with identity, access, and endpoint security solutions

• Experience supporting ISO 27001 or SOC 2 initiatives

• German language skills

MORE REASONS FOR SOVENDUS

Remote Work

Workation

External Training

30 Days of Annual Leave

WHO WE ARE

1 Team. 18 Nationalities. 50% Women & 50% Men. Hundreds of Opportunities!

Our story began in 2008 in Germany: Oliver Stoll founded the company "Gutschein-Connection". This marked the start of successful growth that has made us the leading network for vouchers and special offers. In 2011, the company was renamed Sovendus, and today, Sovendus has 145 employees who have made this tremendous growth possible. This is also due to our great diversity: our teams consist of roughly equal numbers of women and men, with a total of 18 nationalities and an average age of 35. This includes not only permanent employees but also working students and interns.

IT'S A MATCH?

Do you think you’re a great fit for us and we’re a great fit for you?

Corina Corti Maderna

People & Culture Manager

[email protected]