Head of Security
DeepL · Munich, Bavaria, Germany
- On site
- Full-time
- $200,000 / year
- Munich, Bavaria, Germany
Job highlights
- Lead overall security strategy and teams at DeepL.
- Develop and implement robust security frameworks.
- Own compliance, risk, and operational security.
- Collaborate with teams to embed security practices.
- Drive a strong security culture and report metrics.
About the role
About DeepL
DeepL is a global AI product and research company focused on building secure, intelligent solutions to complex business problems. Over 200,000 business customers and millions of individuals across 228 global markets today trust DeepL's Language AI platform for human-like translation, improved writing and real-time voice translation.
Founded in 2017 by CEO Jaroslaw “Jarek” Kutylowski, DeepL now has over 1,000 passionate employees and is supported by world-renowned investors including Benchmark, IVP, and Index Ventures.
Our goal is to become the global leader in trusted, intelligent AI technology, building products that drive better communication, foster connections, and create a meaningful impact. To achieve this, we need talented people like you to join our journey. If you’re ready to shape the future of AI and grow your career in a fast-moving, purpose-driven environment, DeepL is your next destination.
What Sets Us Apart
What sets us apart is our blend of cutting-edge AI technology, meaningful work, and a culture where people truly thrive. We’re a team of innovators, researchers, and creators driven by a shared purpose to unlock human potential by making work simpler, smarter, and more connected.
When we share what it’s like to work at DeepL, the reactions are overwhelmingly positive. This might be because of our technology that helps millions of people and businesses communicate and work better every day, or because of the trust, curiosity, and care that shape our culture. What we know for sure is this: being part of DeepL means joining a team dedicated to innovation, growth, and well-being. Discover more about life at DeepL on LinkedIn, Instagram, and our Blog.
Your Responsibilities
Strategic Ownership & Leadership
- Own the overall Information and IT Security strategy, leading teams responsible for infrastructure security, application security, organisational security, and information governance.
- Develop, implement, and maintain robust security frameworks that ensure the confidentiality, integrity, and availability of systems and data across the organization.
- Act as the central authority for all security-related initiatives, ensuring alignment with business goals and compliance requirements while being mindful regarding company efficiency.
Governance, Risk & Compliance
- Own compliance programs (e.g., SOC 2, ISO 27001, BSI C5).
- Shape our approach to risk assessment, third-party risk management, and internal security audits.
- Support customer security reviews, RFPs, and due-diligence engagements.
Operational Security & Technology Oversight
- Oversee the design, implementation, and continuous improvement of security architecture across IT infrastructure, cloud environments, user devices and SaaS systems.
- Ensure secure operations through proactive threat monitoring, vulnerability management, hardening, and incident response training.
- Collaborate with engineering teams to integrate security-by-design principles into infrastructure and product development lifecycle.
Collaboration & Stakeholder Management
- Partner with Infrastructure, Product teams, People department, Legal, Sales, and other Business leaders to ensure that security and data protection are embedded into all company processes.
- Foster a strong security culture through awareness training, communication, and transparent reporting of security metrics and incidents.
- Represent the company in security discussions with customers, partners, auditors, and regulators and support sales and customer success teams in high-stakes enterprise deals requiring executive security leadership.
- Contribute to board-level reporting on security posture, risk, and investment.
About You
- Proven experience in Security Engineering or Information Security and in leadership roles, ideally as Head of Security, CISO, or equivalent.
- 5+ years in information security.
- Experience in senior leadership roles.
- Experience with IPO readiness, including SOX compliance, and board-level reporting.
- Background in SaaS, AI, or technology sectors.
- Experience building security teams from the ground up and scaling them alongside business growth.
- Strong understanding of technical security domains (network, cloud, endpoint, identity management, incident response) and information security governance.
- Solid knowledge of international and EU compliance frameworks such as ISO 27001, GDPR and SOC2 / BSI C5.
- Strategic mindset combined with a hands-on approach to execution.
- Fluent in English, with professional proficiency in German preferred.
- Excellent communication and stakeholder management skills with the ability to bridge technical and business perspectives.
- Strong organisational and leadership skills with a focus on driving measurable outcomes and continuous improvement.
- AI-Native Orchestration & Advocacy: You don’t just use AI; you redefine engineering workflows through it. You possess a deep-seated belief in AI’s power to transform the software development lifecycle, data accessibility and infrastructure management.
Nice to have
- Experience with AWS Cloud and OnPremise Data Centres.
- First touch with AI / LLM / Agentic security.
- Experience with security tooling and automation platforms (SIEM, SOAR, IAM, etc.).
- Background in rapid growth environments.
Equal Opportunity Employer
You are welcome at DeepL for who you are - we appreciate authenticity here. Our product is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all succeed, contribute, and think forward! So bring us your personal experience, your perspectives, and your background. It’s in our diversity that we will find the power to break down language barriers in the world.
Key skills/competency
- Information Security Strategy
- IT Security Leadership
- Risk Management
- Compliance Programs
- Security Architecture
- Incident Response
- Security Culture
- Stakeholder Management
- AI Security
- SaaS Security
Skills & topics
- Head of Security
- Information Security
- IT Security
- Cybersecurity
- Risk Management
- Compliance
- SOC 2
- ISO 27001
- AI Security
- SaaS Security
How to get hired
- Tailor your resume: Highlight leadership experience, AI/SaaS background, and compliance expertise for the Head of Security role at DeepL.
- Showcase AI proficiency: Emphasize your AI-Native Orchestration & Advocacy, demonstrating how you leverage AI in security workflows.
- Prepare for security challenges: Be ready to discuss strategic security ownership, risk management, and building security teams.
- Research DeepL's culture: Understand their focus on AI, communication, and innovation to align your answers.
Technical preparation
Behavioral questions
Frequently asked questions
- What are the primary responsibilities of the Head of Security at DeepL?
- The Head of Security at DeepL is responsible for the overall Information and IT Security strategy, leading teams in infrastructure security, application security, organizational security, and information governance. This includes developing and implementing security frameworks, managing compliance programs (SOC 2, ISO 27001, BSI C5), overseeing operational security, and fostering a strong security culture throughout the organization.
- What kind of experience is DeepL looking for in a Head of Security candidate?
- DeepL seeks candidates with proven experience in Security Engineering or Information Security, specifically in leadership roles (Head of Security, CISO, or equivalent), with at least 5 years in information security. Experience with IPO readiness, SOX compliance, board-level reporting, and a background in SaaS, AI, or technology sectors are highly valued. The ideal candidate will have experience building and scaling security teams.
- How does DeepL integrate AI into its security operations, and how should I highlight this?
- DeepL emphasizes 'AI-Native Orchestration & Advocacy,' meaning they look for candidates who believe in AI's power to transform security workflows, software development, data accessibility, and infrastructure management. Highlight any experience you have using AI for security tooling, automation (SIEM, SOAR, IAM), or integrating AI/LLM/Agentic security principles. Mentioning experience with AWS Cloud and on-premise data centers is also beneficial.
- What compliance frameworks are most important for the Head of Security at DeepL?
- Key compliance frameworks for the Head of Security at DeepL include SOC 2, ISO 27001, and BSI C5. A solid understanding of international and EU compliance frameworks like GDPR is also essential. The role involves owning these compliance programs and shaping the company's approach to risk assessment and audits.
- What is DeepL's approach to security culture and collaboration?
- DeepL fosters a strong security culture through awareness training, communication, and transparent reporting of security metrics and incidents. The Head of Security will partner closely with various departments, including Infrastructure, Product, Legal, and Sales, to embed security and data protection into all company processes and represent the company in external security discussions.
- What is the preferred language proficiency for this role?
- The role requires fluency in English. Professional proficiency in German is preferred but not mandatory. Excellent communication and stakeholder management skills are crucial to bridge technical and business perspectives effectively.