---
title: 'Principal Information Security Manager at Staffbase'
canonical: 'https://feeny.ai/job/principal-information-security-manager-staffbase-chemnitz-sachsen-jtjz7hkcvf96'
type: 'job'
last_seen: '2026-09-10'
---

# Principal Information Security Manager at Staffbase

- **Company:** Staffbase
- **Location:** Chemnitz Sachsen, Germany
- **Posted:** 2026-07-07
- **Last confirmed live:** 2026-09-10
- **Apply:** https://job-boards.greenhouse.io/staffbase/jobs/8622018002

## Job description

## About Staffbase

We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry-leading and award-winning agentic AI communications channels - intranet, employee app and email solutions - create engaging experiences that connect and empower employees.

Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience. We are proud to be a Unicorn company—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.

Our information security program is fit for purpose and operationally sound. The next chapter is about making it investor-ready, AI-efficient, and capable of sustaining enterprise customer trust at scale.

This is not a build-from-scratch role. It is a step up in maturity: fewer manual processes and sharper governance.

The position sits at the center of the InfoSec team; you coordinate across teams, own outcomes and represent the function. You are comfortable being the person customers and auditors talk to.

You think in programs and systems, not tasks. You identify where manual effort can be replaced by tooling or AI-assisted workflows, and are empowered to drive that change as we build out our AI-driven operating model across the company.

## What you’ll be doing

You will act as the senior deputy for InfoSec within our Finance & Operations department, owning the function day-to-day, representing it internally and externally, and making it run with less friction and more intelligence.

You report directly to the SVP Business Operations & Transformation and work closely with Legal, Procurement, Engineering, external auditors and enterprise customers.

You will own;

Compliance & Audit

- Lead ISO 27001 and SOC 2 audit cycles end-to-end in preparation, evidence collection, auditor management, and findings remediation
- Own the control framework and ensure it stays current as the business evolves
- Prepare the InfoSec program for investor and M&A due diligence scrutiny

Customer Trust

- Own the response to enterprise customer security questionnaires and RFPs
- Represent Staffbase credibly in customer security reviews, calls, and audits
- Build scalable approaches (automation, templates, knowledge base) to reduce response time without sacrificing quality

Risk & Vendor Security

- Maintain the risk register and drive risk treatment decisions with relevant stakeholders
- Own vendor security assessments for critical and high-risk suppliers
- Partner with Procurement and Legal on AI-assisted review workflows

Policy & Awareness

- Own the internal security policy framework, keep it current, understandable, and enforced
- Design and run security awareness programs that change behaviour, not just tick boxes

Incident Response

- Own the incident response plan and lead execution when incidents occur
- Coordinate with Engineering, Legal, and leadership during incidents
- Drive post-incident reviews and close findings with owners

## What you need to be successful

Essential Experience

- 5+ years of hands-on InfoSec experience in a SaaS or B2B tech company
- Proven ownership of ISO 27001 and/or SOC 2 programs
- Track record of representing InfoSec to enterprise customers, including security reviews and escalations
- Must be fluent in German and English
- Comfortable with AI-driven tooling; actively looks for automation opportunities in compliance and operations

Highly Desirable

- Experience supporting or preparing for M&A or investor due diligence processes
- Background working alongside Legal, Procurement, and Engineering
- Practical understanding of cloud security architecture (enough to challenge and validate, not operate)
- Relevant certification: CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or equivalent. Certification matters less than what you have built

## What you'll get

- Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
- Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
- Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
- Support - we’re offering a company pension scheme
- Volunteers Day - you’ll get one day off per year for supporting a social project

## About Staffbase

## Company Overview
- **One-liner**: Staffbase is an AI-native employee experience platform that connects Comms, HR, and IT to deliver trusted, personalized communication and knowledge to every employee, from the corner office to the frontline.
- **Entity Type**: Private (founder-led, stage not publicly disclosed)
- **Headquarters**: Chemnitz, Germany
- **Founded**: 2014
- **Founders**: Frank Wolf, Martin Böhringer, Lutz Gerlach [staffbase.com/about-us](https://staffbase.com/about-us)

## Core Business
- **Primary industry**: Employee communications, internal communications, HR technology, digital workplace
- **Target customers**: B2B – Enterprise and mid-market organizations across industries (healthcare, retail, manufacturing, etc.)
- **Mission/purpose**: “We exist so no employee gets left behind.” [staffbase.com/about-us](https://staffbase.com/about-us)

## Products & Services
- **Staffbase Intranet**: AI-powered employee hub that organizes content, knowledge, and tools in one personalized place. (SaaS)
- **Employee App**: Mobile-first channel for frontline workers, with tasks, services, and AI-driven updates. (SaaS)
- **Digital Signage**: Physical display updates for on-site employees. (SaaS/hardware integration)
- **Email**: Governed, personalized email campaigns integrated with existing tech stacks. (SaaS)
- **AI Assistant**: Purpose-built assistant that delivers instant answers grounded in trusted company knowledge, with automated governance and content quality checks. (AI/SaaS)
- **Service & Knowledge Delivery**: Tools to help employees find answers, access HR services, and complete tasks without back-and-forth. (SaaS)
- **Integrations**: Deep partnerships with Microsoft 365, ServiceNow, Workday, Google Workspace, and more. (Platform)

## Market Standing
- **Valuation**: Not publicly disclosed
- **Key Metric**: Over 1,500 enterprise customers, connecting 14 million employees across 75 countries and 190 languages [staffbase.com](https://staffbase.com/)
- **Notable Investors**: Not specified in available sources (backed by a "real guarantee" and founder-led)
- **Growth Signals**: 
  - 3x Leader in Gartner Magic Quadrant for Intranet Packaged Solutions
  - G2 Leader across four categories (Intranet & Frontline Platforms)
  - 2026 Clearbox Choice Award Winner across three categories
  - 30,000+ member community of employee experience professionals
  - Trusted by high-profile customers like Alaska Airlines and Bethany Children’s Health Center [staffbase.com](https://staffbase.com/)

## Competitive Advantages
- **AI Quality Layer**: Ensures every AI-generated answer is accurate, contextual, and aligned with organizational policies before reaching employees.
- **Multi-channel single source of truth**: One platform governing intranet, app, email, and digital signage, reducing fragmentation.
- **Frontline-first philosophy**: Built from the belief that the hardest-to-reach employee sets the bar for everyone else.
- **Governance & compliance**: Automated workflows, content ownership, and compliance features for security-sensitive industries (healthcare, finance, etc.).
- **Deep integrations**: Works with existing enterprise tools (Microsoft 365, ServiceNow, Workday) rather than replacing them.

## Strategic Focus
- Deepening AI capabilities (AI Assistant, automated governance, knowledge quality)
- Expanding frontline worker support and mobile-first experiences
- Strengthening compliance and security features for regulated industries
- Continuing to scale globally while maintaining founder-led culture

## Why Work Here
- **Culture**: Values-driven (“Let’s own it”) with a focus on ownership, growth mindset, authenticity, and customer obsession. Strong emphasis on collaboration and continuous improvement [staffbase.com/jobs/culture](https://staffbase.com/jobs/culture/)
- **Work model**: Hybrid work options with flexible working time models; offices in Chemnitz, Berlin, Dresden, New York, London, and more
- **Benefits**:
  - 31 vacation days (incl. one floating holiday) plus fully paid Fridays off during August
  - Annual flex work allowance of EUR 1,560 / USD 1,608 / GBP 1,356 / AUD 2,400
  - Long Term Incentive Plan (LTIP) and competitive salary packages
  - Voluntary day off per year for social projects, employee referral bonus
  - Employee Resource Groups (ERGs) for community and awareness
  - Health and wellness: ergonomic workplaces, office snacks, regular team events
- **Engineering culture**: Focus on empowerment, ownership, and technical excellence; roles across product security, platform engineering, and technical product management. Recruitment process includes a “shOWN-time” task to demonstrate skills [staffbase.com/jobs](https://staffbase.com/jobs/)

## Sources
1. [staffbase.com](https://staffbase.com/)
2. [staffbase.com/about-us](https://staffbase.com/about-us)
3. [staffbase.com/jobs](https://staffbase.com/jobs/)
4. [staffbase.com/jobs/culture](https://staffbase.com/jobs/culture/)
5. [linkedin.com/company/staffbase](https://linkedin.com/company/staffbase)
6. [job-boards.greenhouse.io/staffbase](https://job-boards.greenhouse.io/staffbase)

## Other roles at Staffbase

- [Mid level - Fullstack Engineer](https://feeny.ai/job/mid-level-fullstack-engineer-staffbase-berlin-rzsgheeg8cf3) — Berlin, Germany / Chemnitz Sachsen, Germany / Dresden Sachsen, Germany
- [Senior Product Security Engineer](https://feeny.ai/job/senior-product-security-engineer-staffbase-germany-51m0qvxf2fy0) — Germany
- [Corporate Sales Development Representative](https://feeny.ai/job/corporate-sales-development-representative-staffbase-new-york-new-york-1m2w1pwcfh57) — New York New York, United States
- [Principal, Partnership Management – Strategic Partners Europe](https://feeny.ai/job/principal-partnership-management-strategic-partners-europe-staffbase-chemnitz-rdn0bj532ywz) — Chemnitz Sachsen, Germany / Dresden Sachsen, Germany
- [Corporate Sales Development Representative](https://feeny.ai/job/corporate-sales-development-representative-staffbase-chemnitz-sachsen-36npmgeme5ej) — Chemnitz Sachsen, Germany / Dresden Sachsen, Germany
- [Sales Development Representative - France Market](https://feeny.ai/job/sales-development-representative-france-market-staffbase-chemnitz-sachsen-kfkxc3qj0yxr) — Chemnitz Sachsen, Germany / Dresden Sachsen, Germany
- [Enterprise Sales Development Representative](https://feeny.ai/job/enterprise-sales-development-representative-staffbase-london-england-ac6prxv2mz3e) — London England, United Kingdom
- [Enterprise Account Executive](https://feeny.ai/job/enterprise-account-executive-staffbase-new-york-new-york-e2syse8pxyjg) — New York New York, United States
- [Demand Generation Lead](https://feeny.ai/job/demand-generation-lead-staffbase-toronto-kfs6n0d4ef6h) — Toronto, Canada
- [Associate Technical Consultant](https://feeny.ai/job/associate-technical-consultant-staffbase-chemnitz-sachsen-kffr79t4hpqy) — Chemnitz Sachsen, Germany / Dresden Sachsen, Germany