{"id":1333494,"url":"https://alion.io/job/eventim-director-global-it-security-mfd","title":"Director Global IT Security (m/f/d)","company":{"id":1754751,"name":"EVENTIM","domain":"eventim.de","url":"https://alion.io/company/eventim-de","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":95,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":64,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hamburg, Germany","Bremen, Germany","Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":226000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":16},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Machine Learning","optional":false},{"name":"NIST CSF","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false}],"status":"live","first_seen_at":"2026-08-04T00:00:00Z","employer_posted_date":"2026-08-04","last_verified_at":"2026-10-15T06:07:25Z","board_verified":true,"closed_at":null,"days_open":72,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":72},"description":"About CTS EVENTIM\nCTS EVENTIM is one of the world’s leading providers of ticketing and live entertainment. We connect millions of fans with unforgettable live experiences and provide promoters, venues, artists and partners with powerful technology, services and platforms.\nOur technology landscape includes high-traffic consumer platforms, international ticketing systems, B2B and SaaS solutions, enterprise systems, data platforms, cloud services and scalable infrastructure. IT Security is a strategic enabler of trust, resilience, product quality and continued growth across the CTS EVENTIM Group.\nYour Role\nAs Director Global IT Security (m/f/d), you will lead the continuous hardening of CTS EVENTIM’s group-wide technology landscape and shape the next stage of our security maturity across technology, people and processes. Reporting directly to the CTO, you will own and further develop the security function across Product Security, Enterprise Security, Governance, Risk & Compliance (GRC) and Security Operations.\nA key focus will be strengthening shift-left security across Engineering and Product. You will establish developer-friendly guardrails, practical security standards and strong security capabilities within engineering teams, while protecting high-traffic ticketing platforms against bot attacks, automated abuse and other adversarial traffic patterns.\nYour Responsibilities\nDefine and execute a group-wide IT security strategy and roadmap aligned with business goals, technology strategy and international growth.\n\nDrive the hardening of customer-facing platforms, B2B and SaaS products, enterprise systems, cloud services, infrastructure, identity platforms, APIs, development environments and third-party integrations.\n\nBuild and mature the security operating model across Product Security, Enterprise Security, GRC and Security Operations, including policies, controls, risk management and measurable outcomes.\n\nEstablish practical DevSecOps and shift-left capabilities, including secure coding, threat modelling, security champions, code and infrastructure scanning, CI/CD security and secure release gates.\n\nLead the security approach for high-traffic, business-critical ticketing platforms, including bot management, WAF/CDN controls, DDoS protection, rate limiting, behavioural analytics, anomaly detection and incident playbooks.\n\nLead Security Operations and incident readiness, including monitoring, detection engineering, escalation paths, exercises, post-incident reviews and continuous improvement.\n\nOwn the security-related GRC agenda and support compliance and audit readiness in line with relevant frameworks and regulations, including ISO 27001, NIST CSF, GDPR and NIS2-related expectations.\n\nShape the responsible use of AI in cyber defence and security operations, while establishing appropriate governance, human oversight, auditability and safeguards for sensitive information.\n\nLead, develop and scale the IT Security team and strengthen security awareness and behaviour across the organisation.\n\nWhat You’ll Need\nAt least 10 years of experience in cybersecurity, information security or IT security, including significant leadership responsibility in a technology-driven, high-scale or digital platform environment.\n\nProven experience leading security across complex IT landscapes covering customer-facing platforms, APIs, cloud services, on-premises infrastructure, enterprise systems, identity platforms and software development environments.\n\nA strong track record in building or maturing security functions across Product Security, Enterprise Security, GRC and Security Operations.\n\nDeep expertise in application and product security, enterprise security, identity and access management, vulnerability management, secure architecture, incident response and security monitoring.\n\nStrong practical understanding of DevSecOps, secure SDLC, software supply chain security, developer enablement and security automation.\n\nExperience protecting high-traffic websites, e-commerce, marketplaces, ticketing platforms, SaaS products or similarly business-critical consumer platforms, including hands-on familiarity with bot management and automated abuse defence.\n\nExperience applying AI and machine learning to cyber defence, combined with an understanding of AI-specific security risks such as prompt injection, data leakage, adversarial manipulation and model or vendor risk.\n\nThe ability to work credibly with senior engineers and architects while communicating effectively with executives, business leaders and non-technical stakeholders. Excellent English communication skills are required; German is highly advantageous.\n\nMindset & Qualifications\nYou see security as an enabler of trust, resilience and innovation. You combine strategic thinking with hands-on pragmatism, build strong bridges with Engineering and Product, create guardrails that teams actually adopt and remain calm and structured under pressure. A degree in Computer Science, Information Security, Information Technology, Engineering or a related discipline is preferred, while equivalent practical experience is equally valued. Certifications such as CISSP, CISM, CISA, CCSP, GIAC or ISO 27001 Lead Implementer/Lead Auditor are advantageous.\nWhy Join CTS EVENTIM\nThis role offers the opportunity to shape group-wide security in one of the most dynamic technology environments in live entertainment. You will work at the heart of live entertainment and technology, protecting platforms used by millions of fans and developing a strategically important security function with broad organisational visibility. CTS EVENTIM is committed to an inclusive working environment where people of all backgrounds can contribute, grow and do their best work.\nBenefits\n30 days of paid vacation plus the option of up to 15 days of unpaid leave\n25 days of workation within the EU\nFlexible working hours\nSofa Concerts and employee events\nDiscounts on ticket purchases & opportunities for clearing assignments\nCorporate benefits and discounts at KESS\nCentral location & subsidy for a Job Ticket or Germany Ticket\nBike leasing\nMental health program & company pension scheme\n“GoFluent” language learning platform as well as Lunch & Learn sessions\nWe value diversity and treat all applications equally - regardless of gender, background, age, religion, disability, or sexual orientation. Different perspectives enrich our team and make EVENTIM stronger.","description_format":"text","description_chars":6445,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance"],"lifecycle":[{"event":"open","at":"2026-09-27T13:31:37Z"}],"visa":[],"liveness":{"score":37,"band":"fade","label":"Fading","p_open":1,"p_active":0.837,"p_room":0.44,"age_days":72,"expected_fill_days":64,"reasons":["conf:19","velocity","win:tail","crowd:"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/eventim-director-global-it-security-mfd","json_url":"https://alion.io/job/eventim-director-global-it-security-mfd.json","meta":{"generated_at":"2026-10-15T10:47:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16431,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754751},"rest":"https://alion.io/mcp/rest/get_company?id=1754751"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feventim-director-global-it-security-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feventim-director-global-it-security-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feventim-director-global-it-security-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eventim-director-global-it-security-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feventim-director-global-it-security-mfd"}]}