Location: Europe – Hybrid, with a local office base where available.

Solvd Group (Solvd) is a dynamic and growing organization who's mission is to automate the end-to-end motor claims management process by integration of the best-in-class digital and AI-supported tools available in the market. We pride ourselves on delivering excellence through innovation, collaboration, and expertise. With a global presence, Solvd operates in over 45 countries and employs more than 3,700 dedicated professionals worldwide.

The Senior Regional Information Security Officer (Senior Regional ISO) is the primary Information and Cyber Security contact for Solvd and its portfolio companies (PFC). The role leads the design, implementation, and continuous improvement of the Information Security Governance Framework across Solvd Group – spanning automotive claims handling and insurance software – and reports into the Group CISO function.
The Senior Regional ISO defines Solvd's security strategy, ensures regulatory and Group alignment, and drives consistent execution of policies and controls across all entities, with a particular focus on governance, oversight, risk management, and compliance maturity. This includes ensuring alignment with ISO 27001, Group Information Security Framework (GISF), NIS2, DORA, and the Cyber Resilience Act (CRA).
This role will transition into Regional responsible, while transversal topics like Awareness, IAM, GRC will be managed by respective function in overarching CISO organization, giving clear direction and organize activties also for Solvd.

Security Strategy & Governance

• Define and maintain the Solvd Information Security strategy, ensuring alignment with business objectives and Group requirements.
• Establish and continuously enhance the Information Security Target Operating Model (TOM) across Solvd GmbH and PFCs.
• Lead the Information Security Community, ensuring collaboration, knowledge sharing, and consistent prioritisation across entities.
• Oversee the design and rollout of security policies, standards, and control frameworks (ISO 27001, GISF, NIS2, DORA, the Cyber Resilience Act, and COBIT).
• Provide transparency and reporting to the Information Security Steering Board (ISSB), the Solvd Board of Management (BoM), and the Group CISO

Risk Management & Compliance

• Manage the annual Information Security Self-Assessment process, consolidate results, and track mitigation progress.
• Ensure compliance with applicable regulations (NIS2, DORA, GDPR, the Cyber Resilience Act) and customer obligations.
• Act as the primary interface for internal and external auditors and for Group IS.

Incident Management & Resilience

• Oversee the incident reporting and escalation framework; ensure Group-level transparency and timely communication.
• Lead post-incident reviews and lessons-learned sessions across entities, incorporating lessons from sector-relevant ransomware and data-exposure incidents.

Identity & Access Management (IAM) Governance

• Define the IAM Target Operating Model and ensure consistent implementation across entities.
• Establish governance for identity lifecycle, privileged access, and access certification.

Third-Party Cyber Risk Management

• Oversee the Third-Party Security Framework, including due diligence, onboarding, and monitoring of suppliers.
• Coordinate third-party security assessments and ensure appropriate supplier security requirements are implemented.

Culture, Awareness & Leadership

• Foster a security-conscious culture across all Solvd entities through awareness campaigns, training, and leadership engagement.
• Build and maintain strong partnerships with local security leads and key stakeholders (IT, Risk, Data Privacy, Compliance, Legal).
• Represent Solvd in Group security committees and working groups.

• 6+ years in information security, risk, or IT governance roles, with proven experience in multinational organisations, ideally spanning automotive, insurance, or another regulated industry.
• Strong understanding of regulatory frameworks (NIS2, DORA, GDPR, ISO 27001, the Cyber Resilience Act).
• Experience in defining and implementing security governance structures in federated organisations.
• Hands-on experience with GRC platforms (Archer or equivalent) for control assurance, risk registers, and evidence management, including automation of workflows across systems such as SharePoint, ServiceNow, Jira, SuccessFactors, or comparable IAM/ITSM tools.
• Proven track record in stakeholder management at C-level and with external regulators or auditors.
• Fluent in English (German advantageous).
• Relevant certifications: CISM, CISSP, ISO 27001 Lead Auditor/Implementer preferred.

Key Competencies

• Strategic, structured, and pragmatic mindset.
• Strong collaboration skills — capable of influencing without direct authority.
• Clear communicator, able to translate technical risk into business language.
• High integrity, resilience, and leadership under pressure.
• Continuous improvement and results-driven approach.

Our employees play an integral part in our success as a business. We appreciate that each of our employees are unique and have unique needs, ambitions and we enjoy being a part of their journey.

We are there to empower and encourage you with your personal and professional development ensuring that you take control by offering a large variety of courses and targeted development programs. All that in a global environment where international mobility and career progression are encouraged. Caring for your health and wellbeing is key priority for us. This is why we build Work Well programs to providing you with peace of mind and give the flexibility in planning and arranging for a better work-life balance.

Company name: StepStone Deutschland GmbH