Information Security Manager

Position Summary

As Information Security Manager at realworld one, you will take ownership of our company-wide security landscape, ensuring that our systems, products, and processes meet the highest standards of security, reliability, and compliance in a regulated environment.

You will operate at the intersection of strategy and execution, maintaining and evolving our existing security structures while actively supporting the implementation of practical, scalable security measures across our organization.

Collaborating closely with Engineering, Product, IT, and Leadership, you will act as the central authority for all security-related topics, ensuring that our organization remains secure, compliant, and well-positioned for continued growth.

Responsibilities

• Own and continuously develop the company’s information security strategy, ensuring alignment with business objectives and regulatory requirements.
• Maintain, strengthen, and scale existing security structures, processes, and policies in a growing software organization.
• Act as Information Security Officer (ISO), owning the ISMS and leading ISO 27001 and ISO 9001 compliance and audits.
• Balance governance and hands-on execution by actively supporting the implementation and monitoring of security controls across infrastructure, applications, and internal processes.
• Identify, assess, and mitigate security risks across the organization, including product security, data protection, and operational security.
• Collaborate closely with Engineering, Product, and IT to embed security best practices into development and operational processes.
• Drive company-wide security awareness and promote a strong culture of security and accountability.

Qualifications

• Degree in Computer Science, Information Security, IT, or a related technical field (or comparable practical experience).
• Broad technical understanding across cloud, application, and infrastructure security, with the ability to translate security requirements into practical implementations.
• Experience in software-centric organizations, ideally in small to mid-sized environments requiring end-to-end ownership across multiple security domains.
• Proven ability to operate as a high-impact individual contributor with strong ownership and autonomy in ambiguous, resource-constrained settings.
• Strong stakeholder management skills, with the ability to communicate effectively with both technical teams and senior leadership.
• Exposure to information security frameworks and standards (e.g., ISO 27001) with initial practical experience or strong interest in ISMS environments.