Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Doodle is seeking a leader to own the governance, compliance, and operational backbone that enables the company to move fast without breaking trust. This role involves running the security stack, compliance programs, and AI governance framework, while leading the IT team.

Responsibilities

• Design and own Doodle's AI governance framework, including agentic AI security controls, EU AI Act assessment, and risk management for external contributors.
• Build policy, the risk register, and technical enforcement through our SSE platform.
• Author board-level cybersecurity posture presentations using the NIST CSF 2.0 framework.
• Translate technical risk into business language for the CEO and CFO.
• Own and drive SOC 2 Type II, HIPAA, ISO 27001, and ISO 42001 compliance programs.
• Serve as Privacy Officer, managing GDPR and Swiss FADP obligations, the DPA portfolio, and the external DPO relationship.
• Operate and evolve Doodle's security toolset, including EDR, MDM, IAM/SSO, email security, and security awareness platforms.
• Lead the EDR migration from CyberReason.
• Operate Netskope as our CASB and SSE layer.
• Run a structured vendor due diligence program, including SOC 2 reviews, security questionnaires, and code of conduct sign-offs.
• Support enterprise customers across government, energy, and healthcare.
• Maintain a live risk register in Linear.
• Lead a lean IT team supporting 100+ headcount across Berlin, remote EU, and contractor base.
• Own the full IT lifecycle: onboarding and offboarding, access provisioning, SaaS portfolio management, device management, and the service desk.
• Maintain a compliance audit trail for SOC 2.
• Automate IT workflows, including joint IT and PeopleOps onboarding.
• Evaluate and drive CLM tooling selection to enable self-serve enterprise contract acceptance.

Requirements

• Proven experience owning multi-framework compliance programs such as SOC 2, ISO 27001, ISO 42001, or HIPAA.
• Experience serving as a Privacy Officer or managing GDPR/FADP obligations directly.
• Strong understanding of EDR, MDM, IAM/SSO, and CASB/SSE tooling in a live production environment.
• Experience building AI governance frameworks, including emerging regulation such as the EU AI Act.
• Comfortable running a live risk register and structured vendor due diligence process.
• Able to assess and manage risk from external contributors and third-party tools.
• Experience leading a lean IT team supporting 100+ employees across multiple locations.
• Hands-on with the full employee lifecycle: onboarding, offboarding, access provisioning, device management, and service desk.
• Comfortable owning a SaaS portfolio and driving tooling decisions such as CLM platform selection.
• Able to translate technical risk into business language for CEO and CFO audiences.
• Comfortable presenting security posture at board level.
• Strong cross-functional partner to PeopleOps, Legal, and external DPO relationships.
• Must be based and have the right to work in Germany.
• Unable to sponsor visas or support relocation.

Skills

• Security Stack Operation
• Compliance Program Management
• AI Governance
• Risk Management
• Vendor Due Diligence
• IT Operations Leadership
• Employee Lifecycle Management
• SaaS Portfolio Management
• Tooling Selection
• Communication
• Stakeholder Management
• NIST CSF 2.0
• SOC 2
• HIPAA
• ISO 27001
• ISO 42001
• GDPR
• Swiss FADP
• EDR
• MDM
• IAM/SSO
• CASB/SSE
• Netskope
• SentinelOne
• CrowdStrike
• Jamf Pro
• Okta
• JumpCloud
• Proofpoint PPS
• KnowBe4
• Linear
• Juro
• Ironclad

Location

• Berlin
• Remote EU

Work Type

• Full-time

Experience Level

• Lead
• Senior

About the Company

• Doodle is a B2B SaaS platform used by millions of professionals to coordinate meetings and collaboration.
• At Doodle, we are committed to providing an environment of mutual trust and respect, where equal employment opportunities are available to all applicants and teammates without regard to age, race, color, disability, religion, gender, or sexual orientation.
• Diversity and inclusion are important to us because the best products are built by teams with different experiences, perspectives, and backgrounds.

Equal Opportunity

• Equal employment opportunities are available to all applicants and teammates without regard to age, race, color, disability, religion, gender, or sexual orientation.