Sendcloud is Europe’s leading e-commerce shipping platform, helping online retailers save time, increase conversion, and drive customer satisfaction. Operating across eight European markets. We are on a mission to Solve Shipping Globally by simplifying the shipping experience for merchants and their customers. With our commitment to innovation and growth, we seek a dedicated Information Security Officer to protect our assets, systems, and data in a fully cloud-based environment.
Position Overview:
We have 30.000 customers sending hundreds of millions of parcels across the world so Security is one of the top priorities at Sendcloud. This position is the key coordinator of all our information security efforts. Working closely with all of the different departments at Sendcloud, this role will coordinate the full security agenda and our ISMS (we have been ISO 27001 certified since 2020). We have a mature ISMS and are looking for someone who can oversee our security strategy, policy and programs. You will manage our risk and compliance efforts, build and improve security frameworks and be responsible for the continuous improvement of our security posture. This role requires both strategic and hands-on expertise, as you’ll be tasked with advancing our security posture to support scalable growth across our European markets. We have our Headquarters in Eindhoven and are looking for someone who can join us there, while offering support to our offices in Munich (DE) and Florence (IT).
Key Responsibilities:
- Security Strategy Development: Design, implement, and maintain a comprehensive information security strategy that aligns with Sendcloud’s growth goals, regulatory requirements, and industry best practices.
- Risk Management: Conduct regular risk assessments, identify vulnerabilities, and ensure mitigation of risks across Sendcloud’s cloud-based systems.
- Policy and Governance: Develop and enforce information security policies, standards, and guidelines for secure data handling, access management, and threat mitigation.
- Compliance and Audit: Ensure Sendcloud complies with relevant data protection regulations (e.g., GDPR) and lead audits to assess and verify compliance with regulatory and internal security standards.
- Identity and Access Management (IAM): Collaborate with IT and engineering platform teams to establish secure identity management systems that protect user data and sensitive information.
- Incident Response: Lead incident response activities, including investigating security breaches, analyzing root causes, and implementing corrective actions to prevent future incidents.
- Awareness and Training: Conduct regular training and awareness programs for employees to foster a security-first culture within Sendcloud.
- Vendor and Third-Party Security: Evaluate and monitor the security posture of third-party vendors to ensure they meet Sendcloud’s security standards.
- Metrics and Reporting: Establish and report on key security metrics to provide regular updates to the leadership team, highlighting security trends, incidents, and improvements.
Qualifications:
- 3+ years of experience in information security, ideally within a high growth SaaS or technology company.
- Strong knowledge of cybersecurity frameworks and best practices, including ISO 27001 and GDPR.
- Experience with cloud security, IAM, and data protection in multi-cloud or cloud-native environments. (You don’t have to manage all of this by yourself but should be able to work with those who do).
- Demonstrated ability to manage security incidents and lead response efforts with cross-functional teams.
- Relevant certifications (e.g., Security+, CISSP, CISM, CISA) are highly desirable.
- Excellent analytical and problem-solving skills, with a detail-oriented approach.
- Strong communication skills to effectively convey security policies and standards across the organization.
- A getting stuff done mentality; You don’t just want to talk about making changes, but also want to get your hands dirty on implementation.
- If you are unsure about whether or not you have the right qualifications for this role, just apply or reach out, you might have the right personality for the job!
Why Join Sendcloud?
- Be a part of an ambitious, collaborative team that is reshaping the e-commerce shipping industry in Europe.
- Work in a fast-growing, dynamic environment where you can have a tangible impact.
- Access to ongoing training and development opportunities to advance your career in information security.
If you’re passionate about safeguarding data, designing secure systems, and making a meaningful impact in a rapidly growing tech company, we’d love to hear from you!
