Head of IT Security (f/m/d)

Permanent contract, full-time, Cologne / Remote

Who we are


We are real.digital: Several thousand merchants and millions of products make our multi-channel portal one of the largest marketplaces in Germany. Our work is characterised by a dynamic corporate culture, with a start-up mentality and the opportunities offered by a large corporation in the background. We combine knowledge and many years of experience in e-commerce with flat hierarchies and a highly motivated team. Whether as an intern or an executive: We take every idea seriously, because we want to work together in shaping the future of e-commerce!

We are a  Remote First Company  ! That means you decide whether you want to work in our office in the heart of Cologne // in our modern loft office in the heart of Darmstadt // in our modern office in the Rhine metropolis Düsseldorf, in your home office or at any other location. We want to offer you the most attractive workplace in e-commerce and a maximum of flexibility for your personal work-life balance.

Day-by-day, our development team of about 150 experts pursues the goal of creating the best-possible customer shopping experience for the real.de marketplace. We are here to inspire millions of customers, to help them find, purchase and get the things they love. To enrich the lives of our customers, we collaborate in cross-functional teams, in which product owners, product designers, frontend and backend engineers, data scientists and lean managers join forces. Details regarding the challenges of the respective product areas can be found here:  https://www.real-digital.de/team/tech/

Your tasks – this is what awaits you in detail

  • You will be responsible of leading the security team and taking care of all the security, IT governance, risk and compliance topics for our marketplace
  • You assess the current security and Governance, Risk Management, and Compliance situation, identify weaknesses and improvements and set up a roadmap
  • You significantly contribute to making our marketplace a secure place for all of our customers and merchants by developing and operationalizing governance guidelines, policies and internal security standards and processes
  • You conduct awareness trainings to our working staff and provide guidance to our software engineers (approx. 110 colleagues) as well as advise the CTO and the Executive team for infosec strategic directions
  • You support product teams on risks evaluation and choosing most appropriate solutions for threats and vulnerabilities
  • You have experience in building up and maintaining a Information Security Management System (ISMS) and respectively used standards as ISO 27001 / BAIT

Your profile – this is what we expect from you

  • You have previous working experience in the field of security, managing both hands-on operational aspects (tooling, monitoring, integration) as well as compliance aspects (creating policies and processes, evaluating risks)
  • You are experienced in creating a well-structured security roadmap and executing it accordingly 
  • You possess a very good knowledge in network protocols, firewalls, encryption, have worked with SIEM and IAM solutions and you are familiar with cloud, server and software architectures
  • Ideally you have also gathered experience in the complete software development lifecycle (worked as a developer) and security automatization - DevSecOps
  • You have a very high capacity for abstraction, analytical thinking and your actions are always based on partnership
  • You have the drive to continuously develop both yourself and your team further in order to become a little bit better every day


What we offer

  • Remote first: You decide, if you prefer to work from the office or from home

  • A highly-motivated and qualified team from different fields and numerous nations

  • A sophisticated product with millions of users and a broadly-based technology stack

  • A dynamic environment with a start-up mentality, no superfluous red tape and hierarchy, as well as plenty of courage and trust to break new ground

  • Free choice of hardware – we provide you with the development environment of your choice

  • Always up-to-date – you receive four days of special leave and a budget of €1,300 per year to attend relevant fairs and conferences

  • Top conditions at the Urban Sports Club for fitness, team sports, yoga and more

Why are you the perfect fit for this position? Don't bother with cover letters - we're interested in facts and figures!
Apply here
Your contact person: Marion Graßler
real.digital
real,- Digital Payment & Technology Services GmbH
Habsburgerring 2
50674 Köln

Offene Stellen