Principal of Information Security (f/m/d)

This full-time position in Munich involves leading the company’s information security function during a critical stabilization phase following recent ISO 27001 certification. The role requires managing the upcoming re-audit, defining the security strategy, and maintaining the risk register while overseeing external provider relationships. Daily responsibilities include making strategic decisions with incomplete information and performing hands-on operational tasks to support day-to-day security activities. The job description does not specify particular technical tools or software requirements for this role. No specific years of experience or formal qualifications are listed in the provided text. There are no stated language requirements for this position. The working arrangement is not explicitly defined as remote, hybrid, or office-based in the excerpt. This opportunity suits a senior security practitioner who prefers shaping a function over merely executing it. It is ideal for someone who thrives in ambiguous environments and can balance high-level strategy with direct operational work.