Hybrid Global IS Operations Lead

at ControlExpert GmbH

• Job title: Global IS Operations Lead
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Kubernetes
• Location requirements: Hybrid, Langenfeld, Germany

About the role

• Global IS Operations Lead overseeing IS Operations for ControlExpert, managing security functions and teams. Innovating automotive claims management with a focus on centralized security and compliance standards.

Responsibilities

• Establish and manage Solvd’s centralized Information Security Operations, consolidating fragmented security functions
• Oversee external MSSP partners and lead a dedicated team to deliver 24/7 SOC monitoring, threat detection, incident response, vulnerability management, penetration testing, and security strategy
• Define service levels and ensure adherence to information security policies and regulatory frameworks (e.g., ISO 27001, NIST, DORA, NIS2)
• Manage the central budget, implement a consumption-based recharge model, and provide unified reporting with consolidated KPIs to the Board
• Enhance cyber resilience through continuous improvement, automation, and threat-informed defense strategies
• Run monthly phishing campaigns and annual training programs to bolster organizational security awareness
• Lead a central team and serve as the primary interface with local IT teams, vendors, and key departments like Infrastructure, Cloud, and Applications

Requirements

• 7+ years in Information Security with at least 3 years in leadership roles managing SOC, Vulnerability Management, or Incident Response
• In-depth knowledge of AWS and Azure security controls, including cloud-native security concepts (IAM models, logging pipelines, encryption) and container security (Kubernetes)
• Strong familiarity with SIEM, SOAR, EDR/XDR, vulnerability scanners, and network security controls and experience with industry standards (e.g., ISO 27001, SOC 2, MITRE ATT&CK) and regulatory frameworks (e.g., GDPR, DORA, NIS2)
• Proven ability to manage MSSPs and external security vendors, including contract negotiations and SLA management
• Excellent negotiation and communication skills for managing diverse stakeholders and advocating the value of central services
• Fluent in English (German is a plus)
• Nice-to-have: Certifications (CISSP, CISM, CEH, GCIA, etc.), Experience with cloud security (AWS / Azure), Experience in regulated environments (ISO, NIS2, SOC)

Benefits

• Flexible working hours with ~80% remote work
• Fitness and wellness offers via Urban Sports Club
• Discounted Allianz products (insurance, pensions, investments)
• Bicycle leasing via JobRad
• Private leasing options for the latest tech devices
• Many employee events (sports events, after-work gatherings, parties, ...)
• Our in-house kitchen provides a delicious lunch at a fair price