Director of Information Security & Sovereign Operations (f/m/x)

Build the Market Leader in Satellite Analytics with us at LiveEO

LiveEO is seeking a high-impact leader to lead and scale our global security organization. You will oversee the company's information security architecture across our international commercial branch and our high-assurance, government-facing operations. This role is central to scaling our Sovereign Branch - dedicated to regulated institutional partners and critical infrastructure - ensuring full compliance with BSI IT-Grundschutz and international high-integrity standards.

You will act as the global director of our Information Security Management System (ISMS) and central contact point for all matters related to security compliance, audits, certifications, and risk governance, both internally and externally, ensuring that our systems and data meet the highest standards of integrity, confidentiality, and availability.

This is a high-impact role for someone who thrives in fast-paced, regulated, and technically complex environments.

Your challenge

• Lead and evolve LiveEO’s global ISMS, ensuring it meets standards for high-assurance data handling and international frameworks like ISO 27001 and SOC2.
• Design and enforce internal IT security & access policies and controls as well as risk management procedures.
• Lead the technical and organizational implementation of restricted-access silos within our cloud-native environment.
• Drive implementation and successful audit for e.g. BSI certification, renew certification of SOC2 Type II and ISO27001. Ready LiveEO to meet addional security and quality standards.
• Provide functional leadership, support audit readiness and lead interactions with certification bodies and government bodies.
• Partner with HR to manage the personnel reliability & vetting processes for all technical and administrative staff
• Execute regular technical audits of the sovereign-hosted environments configurations to ensure compliance independence.
• Promote a culture of security through internal training, awareness programs, and process ownership.
• Lead the technical forensic investigation and mandatory reporting for any security incidents involving critical-tier data assets.
• Monitor evolving legal and regulatory requirements and adapt policies accordingly.

Security Architecture, Tools & Platforms You Will Work With

• Security frameworks: BSI IT-Grundschutz, SOC2, ISO 27001, ISO 9001 NIST 800-53
• AWS Security Services (IAM, GuardDuty, Inspector)
• Auth0
• GitLab, JIRA, Confluence, Linear
• Google Workspace

Your profile

• German nationality (due to customer and compliance requirements)
• 10+ years of experience in information security, IT governance, or risk & compliance roles
• Proven success with BSI certification or audit projects
• Familiarity with SOC2, ISO 27001, or NIST 800-53 frameworks
• Strong understanding of cloud-native security, especially AWS
• Excellent cross-functional communication skills
• Fluency in German and English

• Experience in regulated industries (e.g. space, energy, mobility, telecom)
• Knowledge of DevSecOps, secure CI/CD or software supply chain practices
• Familiarity with Teleport, Auth0, or similar IAM tooling
• Familiar with AQAP, STANAG
• Experience with security training and awareness programs

Your Benefits

• The opportunity to lead a flagship product line in a high-growth, globally recognized company.
• A culture of ownership, impact, and innovation where your work directly supports climate resilience and infrastructure reliability.
• Competitive compensation, equity options, and benefits.
• A collaborative and learning environment - frequent internal workshops, knowledge sharing sessions, journal clubs and hackathons.
• Office located in the centre of Berlin Kreuzberg with free fruit, nuts and drinks.
• A diverse and vibrant international environment of 30+ different nationalities.
• We are committed to building an inclusive environment where diverse perspectives are valued and encouraged.