Principal of Information Security (f/m/d)

About Orbem

Orbem uses AI to industrialize MRI, delivering non-invasive insight into biological matter from fruits to the human body. Headquartered in Munich, Germany, with an office in Houston, Texas, we transform biological datasets into actionable intelligence to reduce waste, increase quality, and accelerate sustainability and health outcomes.

Your Role

You will own Orbem's Information Security function end-to-end at a pivotal moment. Orbem achieved ISO 27001 certification in December 2025 and is entering an active stabilization phase with controls established, external provider restructuring underway, and a re-audit on the horizon. You will inherit this reality and the authority to shape it.

This is a role for a hands-on, senior security practitioner who wants to shape a security function, not just run one. You thrive in ambiguity, make high-stakes strategic decisions with incomplete information, and can execute operational work while orchestrating a deliberate external provider stack.

Strategy & Program Ownership (≈40%)

• Lead the ISO 27001 re-audit approach: Assess the situation, make strategic recommendations, and own execution
• Set and maintain information security strategy aligned with company stage, enterprise customers (food sector today; healthcare in strategic vision), and risk appetite
• Own the information security risk register end-to-end: build, maintain, and run risk reviews with leadership peers
• Represent Orbem externally with auditors, enterprise security teams, and regulators in CISO capacity
• Advise leadership on information security risk in product, go-to-market, and expansion decisions, including healthcare readiness planning

Hands-On Execution (≈40%)

• Own and continuously improve operational security processes: vendor and supplier risk assessment, security embedding in business workflows, and control-to-practice translation
• Bring policies and controls to life: identify gaps, design remediation, and drive adoption across the organization
• Manage day-to-day security operations alongside strategic program delivery

Why Join

This is an opportunity to build a modern security function at a critical stage. You'll work with enterprise customers in regulated sectors, shape long-term strategy, and operate with genuine autonomy and executive visibility.