remote
Senior Information Security Architect - GLS Germany GmbH & Co. OHG
Software Engineer
Senior Information Security Architect responsible for designing and maintaining secure architectures across on‑premises and cloud environments, driving risk assessments, ISO 27001 compliance, and embedding security into DevOps pipelines using AWS and penetration testing.
About the role
Key Responsibilities
- Design, implement and maintain the organization’s information security architecture across on‑premises and cloud environments.
- Lead risk assessments, threat modeling and security controls selection in alignment with ISO 27001 and other regulatory frameworks.
- Collaborate with cross‑functional teams to embed security into product development, DevOps pipelines and infrastructure provisioning.
- Develop and deliver security architecture roadmaps, architecture reviews and technical guidance to stakeholders.
- Conduct penetration tests, vulnerability assessments and security audits to validate controls and recommend remediation.
Requirements
- 5+ years of experience in information security architecture, preferably in a large enterprise or logistics environment.
- Strong knowledge of ISO 27001, NIST, PCI‑DSS and cloud security frameworks (AWS, Azure).
- Hands‑on experience with security design tools, threat modeling and risk assessment methodologies.
- Excellent communication skills and ability to translate technical concepts to business stakeholders.
- Relevant certifications such as CISSP, CISM or ISO 27001 Lead Implementer are a plus.
Skills
awspenetration testing