Head of Security

Mesalvo GmbH

Head of Security developing information security and data protection strategies for healthcare technology company Mesalvo. Leading projects and advising management on secure solutions with a focus on health and care.

Posted 7/15/2026full-timeRemote • 🇩🇪 GermanyLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing Information Security Management Systems (ISMS) aligned with ISO/IEC 27001 and GDPR compliance, while fostering a culture of security and privacy through effective communication and training. Proficient in risk assessment, vulnerability management, and embedding Security by Design and Privacy by Design principles into organizational processes.

Highest-signal resume keywords

Information Security Management Systems (ISMS)ISO/IEC 27001 ComplianceGDPR ComplianceRisk AssessmentVulnerability Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityData ProtectionSecurity Requirements ImplementationCyber SecurityCloud EnvironmentsHandling Security RisksVulnerability AssessmentsPolicy DevelopmentProcess ImprovementDocumentation

Soft Skills

CommunicationCollaborationSolution-Oriented MindsetAdvisory SkillsChange Management

Tools & Technologies

ConfluenceJira

Industry Keywords

Security by DesignPrivacy by DesignRegulatory ComplianceSecurity Incidents ManagementData Breaches

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

You will strategically develop information security and data protection, shaping an effective ISMS according to ISO/IEC 27001 and a privacy organization aligned with the GDPR.
You will advise management, IT and business units as a trusted sparring partner and support projects with pragmatic, secure solutions.
You will assess risks, derive appropriate measures and ensure sustainable improvement of security and data protection processes.
You will embed Security by Design and Privacy by Design into IT, processes and product development.
You will develop and maintain policies, processes and documentation in a practical and easy-to-understand manner.
You will support audits, ensure compliance with regulatory requirements and drive measured improvements.
You will coordinate security incidents and data breaches, analyze root causes and implement effective remedial actions.
You will promote an open security and privacy culture through advisory services, training and awareness activities — working collaboratively, solution-oriented and with the aim of making a real impact.

Requirements

What you’ll need

You have hands-on experience in information security and data protection and enjoy implementing security requirements in a pragmatic, solution-focused way.
You are motivated to drive change, advance improvements and view information security as support for the business, not merely a compliance task.
You are familiar with cyber security, cloud environments, protection of sensitive data and relevant data protection requirements.
You have practical, hands-on experience handling security risks and conducting vulnerability assessments.
Ideally, you have a background in software development and can discuss technical issues with development teams on equal terms.
You are comfortable using modern collaboration tools such as Confluence and Jira and use them for structured documentation and tracking of measures.
You communicate confidently in German and English and can convey complex security and privacy topics in an understandable way.

Benefits

Comp & perks

Flexible working hours: In agreement with your team, you can decide when your day starts.
Remote work: Mobile working, home office or up to 20 days per year working from abroad — you decide where you feel most comfortable.
Employee benefits: From job bike schemes to gym memberships — we support your physical activity.
Health promotion: Enjoy a range of offerings that support your well-being — because people are our focus.
Events: To keep things fun, we regularly organize company runs, team events and holiday parties.
Onboarding: Careful onboarding by a friendly and open team — who will be available to support you throughout the onboarding process.