Head of Platform & Security

Your Mission

As Head of Platform & Security at Cosuno, you'll take full ownership of the infrastructure, security, and compliance foundations that power our product. You'll be a key strategic partner to our CTO and Engineering team, ensuring we maintain security certifications, meet compliance requirements, and scale reliably as we grow.

In your first few months, you'll likely:

• Complete ISO 27001 certification and establish sustainable processes to maintain it going forward
• Take ownership of Terraform configurations across AWS and GCP, improving structure and reliability
• Respond to security questionnaires from enterprise customers, accelerating deal closure
• Streamline employee IT onboarding and access management across our SaaS tooling stack

How We Work

At Cosuno, we believe in giving people real ownership and trusting them to do their best work. This role offers:

• High autonomy, high impact: Own your domains end-to-end with full support from the CTO and Engineering team when needed
• DevOps mindset: Work with modern infrastructure managed as code using Terraform, deployed to AWS and GCP via Kubernetes, with self-hosted CI/CD runners
• Compliance as a product: Treat security and compliance as genuine trust-building mechanisms, not checkboxes
• Collaborative by default: Partner closely with our Full Stack Engineering team who provide infrastructure support

Your Profile

You'll be an excellent fit if you have:

• Full professional fluency in German and English — a firm requirement for compliance work and customer-facing security initiatives
• Hands-on ISO 27001 experience — you've led or been deeply involved in certification and understand audit processes
• Solid cloud infrastructure experience with AWS and/or GCP, plus infrastructure-as-code expertise using Terraform
• Production Kubernetes experience in operational environments
• Strong organizational maturity to manage multiple concurrent threads (audits, RFIs, infrastructure tasks) without slippage
• Pragmatic, ownership-driven mindset — you find both technical and operational aspects of this role equally interesting

Bonus qualifications: Experience with compliance automation tools such as Vanta, Drata, or Kertos; familiarity with SaaS security best practices; background in regulated industries.

💰 Compensation not publicly listed. Market estimate for similar roles: from $130K, varying by experience and location.