Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

VIA HealthTech automates psychotherapy documentation, allowing therapists to focus more on patient care. This role is crucial for maintaining the security and compliance of sensitive data processed by the company, which already holds C5 and ISO27001 certifications.

Responsibilities

• Own internal IT security end-to-end, including devices, access management, 2FA, endpoint protection, policies, and onboarding/offboarding processes.
• Professionalize and operate the internal IT setup.
• Own IT Compliance (ISO27001 and C5), managing audits, evidence, policies, risk, corrective actions, auditor communication, and training.
• Improve cloud security across infrastructure, access control, encryption, logging, monitoring, and operational processes.
• Collaborate with engineering on product security for web, desktop, mobile, backend, and AI systems.
• Integrate security into the development lifecycle efficiently.
• Coordinate external security activities like penetration tests and vendor assessments.
• Identify security gaps, prioritize improvements, and implement pragmatic solutions.

Requirements

• Strong hands-on experience in IT Security, Information Security, Cloud Security, or a related field.
• Practical experience securing cloud-based software products and internal IT environments.
• Solid understanding of IAM, endpoint security, device management, encryption, logging, access control, and incident response.
• Experience with ISO27001 and/or C5, ideally with audit ownership or significant involvement.
• Ability to work directly with engineering teams on technical security topics.
• Strong operational ownership and ability to execute.
• Pragmatic judgment to balance security with team velocity.
• Clear communication skills and comfort in an async-first startup environment.

Skills

• IT Security
• Information Security
• Cloud Security
• IAM
• Endpoint Security
• Device Management
• Encryption
• Logging
• Access Control
• Incident Response
• ISO27001
• C5
• Application Security
• Secure SDLC
• Threat Modeling
• Vulnerability Management
• Product Security
• Cloud Security Architecture
• Policy Development
• Audit Management

Location

• Berlin Mitte

Work Type

• Full-time
• Startup Environment

Experience Level

• Hands-on
• Operational Ownership
• Early-stage or fast-growing company experience

Benefits

• Office in Berlin Mitte
• Flexible hours
• Direct access to founders and CTO
• Broad ownership over a core company function
• Equity participation
• No micromanagement

About the Company

• VIA HealthTech automates psychotherapy documentation.
• The company operates at the intersection of mental healthcare, AI, and software.
• Security is central to their product development.
• They are a 10-person startup.