{"id":2735849,"url":"https://alion.io/job/open-xchange-information-security-officer-mfd","title":"Information Security Officer (m/f/d)","company":{"id":52356,"name":"Open-Xchange","domain":"ox.io","url":"https://alion.io/company/ox","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Germany"],"countries":["DE"],"hiring_countries":["DE"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":144000,"period":"year","method":"role_country_seniority_unknown","sample_n":54},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-10-16T14:14:42Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-21T13:58:57Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Our mission:\nAre you an information security professional who wants to make a real impact across a decentralized organization? You'll drive the development of our ISMS, ensure compliance with ISO 27001, and work closely with teams to turn security requirements into practical, sustainable solutions.\nAt Open-Xchange (OX), we develop open-source communication and collaboration software used by public sector organizations, telcos, and hosting providers to keep data secure and under their control. Our products cover email, collaboration, DNS security, and related services, and are used by millions of people worldwide.\nDiscover what OX offers you:\nWe work in a non-hierarchical organization that empowers everyone to take responsibility, stay focused, and contribute directly to the company’s success and customer value.\nWe value expertise and continuous professional development. Our professionals work closely with experienced colleagues, take ownership of their work, and continuously expand their skills.\nOpenness and diversity are core to OX. Different perspectives, backgrounds, and ways of thinking strengthen our collaboration and help us see the bigger picture.\nYour team:\nWorking closely with Engineering, Cloud Operations, and IT Architecture, you'll help embed information security as an integral part of our products and processes. You'll create transparency around technical and organizational security measures, continuously develop our Information Security Management System (ISMS), and advise our Management Board on relevant information security matters. In doing so, you'll help ensure that security is actively considered and effectively implemented across all areas of OX.\nYour new job:\nRun the ISMS and ISO 27001\nCoordinate the identification and documentation of technical and organizational security measures across the OX Group, working with the responsible cells to keep documentation consistent, up to date, and traceable.\nDrive the continuous development of our ISMS by establishing sustainable governance structures, clear responsibilities, and aligned security processes and policies across the OX Group, ensuring their consistent application within our decentralized organization.\nPlan, coordinate, and support internal and external ISO 27001 audits as well as risk-based supplier assessments and audits. Coordinate the resolution of audit findings and track the implementation of agreed measures together with the responsible cells.\nMake security work in a decentralized organization\nHarmonize security requirements and processes across different software landscapes, taking varying levels of maturity and risk profiles into account. Support operational cells with clear guidance, practical templates, and targeted advice, while operational ownership remains with the respective cells.\nSupport product cells in identifying and assessing information security risks, document the assessment results within the ISMS, and recommend appropriate measures and risk-based priorities in close coordination with the relevant risk owners.\nEmbed Security by Design across our product portfolio, working closely with DevSecOps and product cells to define security requirements and risk-based priorities early in the development process, including through joint information security sprints. Implementation and operation of security tooling remain with the responsible technical cells.\nHandle regulation and customers\n\nCoordinate the assessment of relevant requirements arising from NIS2 and the Cyber Resilience Act (CRA) with the responsible functions and translate them into aligned security, evidence, and reporting processes, including clear responsibilities for operational implementation.\nCapture and negotiate customer information security requirements and align them with the relevant product cells and business functions.\nYour background:\nA degree in Computer Science, Business Information Systems, IT Security, or a comparable qualification, such as several years of relevant professional experience in information security, IT risk management, or IT compliance.\nPractical experience in establishing, implementing, and certifying an Information Security Management System (ISMS) in accordance with ISO 27001. Knowledge of the German BSI IT-Grundschutz framework is a plus.\nExperience assessing regulatory security requirements and translating them into practical technical and organizational requirements. Knowledge of NIS2 and the Cyber Resilience Act (CRA) is an advantage.\nIdeally, experience introducing or further developing cross-functional security processes in decentralized organizations with varying levels of technical and organizational maturity, combined with openness to working in an environment without traditional hierarchical structures.\nA solid understanding of software and cloud architectures, secure software development, and technical security measures, as well as experience working with engineering, architecture, and operations cells.\nA structured and analytical approach, combined with practical experience in assessing information security risks and deriving appropriate measures and priorities.\nClear and convincing communication skills, strong subject-matter expertise, and the ability to explain complex topics in an accessible and audience-appropriate way, including to the Management Board. You are also able to assess customer information security requirements, represent them clearly, and coordinate them with product cells and customer-facing functions.\nExcellent written and spoken German and English.\nThis is what you get at OX:\nThe flexibility to work 100% remotely ensures a work environment that suits you best.\nFlexible working hours that allow you to successfully combine your home and family responsibilities with work. \nGetting together in-person for workshops and fun team events. \nTime off to volunteer - and mental health support when you need it.\nWe provide financial relief through corporate benefits and a subsidy for ergonomic chairs and desks.\nWe can discuss further location-related benefits together in an initial talk.\nJoin the team:\nJoin us in our fight for an open internet and deliver added value! Click “Apply now” to submit your application.\nYour contact person:\nReach out to Justin () from the People Team. He will be able to discuss current opportunities and tell you more about our exciting vision and mission @OX.","description_format":"text","description_chars":6425,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"German","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Professional development"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Office & Productivity Software","Email Hosting & Delivery"],"lifecycle":[{"event":"open","at":"2026-10-16T19:04:31Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.858,"p_room":1,"age_days":4,"expected_fill_days":35,"reasons":["conf:1","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/open-xchange-information-security-officer-mfd","json_url":"https://alion.io/job/open-xchange-information-security-officer-mfd.json","meta":{"generated_at":"2026-10-21T15:16:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21803,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52356},"rest":"https://alion.io/mcp/rest/get_company?id=52356"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopen-xchange-information-security-officer-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopen-xchange-information-security-officer-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopen-xchange-information-security-officer-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/open-xchange-information-security-officer-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopen-xchange-information-security-officer-mfd"}]}