At Wire, we provide secure communications for governments, defence organisations and regulated enterprises across Europe. We helped pioneer Messaging Layer Security (MLS) and are at the forefront of deploying it in production at scale, delivering end-to-end encrypted messaging, calls and file sharing. Our Government edition holds BSI approval for VS-NfD communications within its approved scope.
GENERAL INFORMATION
- Employment Type: Permanent
- Previous working experience: Significant information security experience, including several years leading security teams
- Working hours: 40hrs/week
- Working Location: Berlin (1-2 days per week in the office desirable)
- Reports to: CPTO
- Languages: German and English at C1 level or above, written and spoken
- Desired start date: As soon as possible
YOUR CHALLENGE AT WIRE
As Director of Information Security, you lead Wire’s InfoSec team, security strategy and assurance programme. The role offers you a path to CISO, with a focus on strategic delivery, team development and external credibility.
Customer engagement and external representation
- Represent Wire in security discussions with government, defence, critical infrastructure and enterprise customers.
- Lead security contributions to major sales opportunities, RFPs and tenders with the commercial team.
- Manage relationships with the BSI, assurance bodies and auditors; represent Wire at relevant industry forums.
- Communicate Wire’s security model, capabilities and assurance evidence clearly and accurately.
Security strategy and governance
- Own the information security strategy and roadmap, prioritising risk reduction alongside product and business needs.
- Provide the executive team with clear recommendations and lead delivery of agreed security priorities.
- Lead security assurance, maintaining our existing ISO 27001 and ISO 27701 certifications and VS-NfD approval, driving continual improvement in the underlying management systems, and progressing work towards BSI C5 attestation.
- Lead international certification, accreditation and security assurance programmes aligned with Wire’s global market priorities, including requirements relevant to EU institutions, NATO and other international government and defence customers.
- Assess security requirements arising from NIS2 and other relevant regulation, and incorporate agreed actions into the roadmap.
- Own security risk management and report risks, priorities and progress to the executive team and board.
- Lead security incident response and coordinate follow-up improvements.
Team leadership
- Lead, coach and develop the InfoSec team, with clear objectives and accountability.
- Allocate team effort to agreed priorities and review delivery against the security roadmap.
- Partner with Product Engineering to embed security in product design, development and release processes.
- Develop security capability and effective collaboration across the business.
First-year objectives
- Establish trusted working relationships with key government and defence customers and prospects.
- Agree a prioritised security strategy and roadmap, and deliver its first-year milestones.
- Mature and embed Wire’s risk management framework, establishing consistent risk assessment criteria, clear ownership and prioritised treatment plans.
- Support major sales opportunities with timely, credible security engagement and assurance evidence.
- Deliver agreed team development objectives and improve collaboration with the wider business.
- Demonstrate readiness for progression to CISO.
