Senior Information Security Manager (GRC)

DeepL is hiring a Senior Information Security Manager to strengthen its Governance, Risk and Compliance function within the Information Security team, reporting into the Head of Security track alongside IT Security. You own the day-to-day operation of the information security and compliance programme, centred on ISO 27001 and SOC 2 Type II, and keep the ISMS, risk register, policy library, vendor risk assessments and control monitoring current. The role is deliberately not a gatekeeper: it means making pragmatic, defensible risk calls that unblock fast-moving product and engineering teams, and embedding compliance into their existing workflows. You also run audits hands-on with auditors and control owners, automate evidence collection with GRC tooling such as Vanta, and report programme status, open risks and remediation progress to leadership.