Head of Platform & Security

📋 Description

• • As the Head of Platform & Security at Cosuno GmbH, you will be entrusted with the ultimate responsibility for the foundational pillars of our technology: the infrastructure, security, and compliance frameworks that underpin our innovative product.
• • This pivotal role places you at the forefront of our growth trajectory, acting as a critical strategic partner to our Chief Technology Officer (CTO) and the broader Engineering team.
• • Your primary mission will be to ensure that Cosuno not only maintains but actively enhances its security posture, achieves and sustains vital certifications, and scales its technological capabilities to meet the demands of an expanding enterprise.
• • You will be empowered with significant autonomy, enabling you to own your domains end-to-end, fostering an environment where your initiative and expertise are paramount.
• • While you will operate with a high degree of independence, the unwavering support of the CTO and the collective Engineering team will always be available to you, ensuring you have the resources and guidance needed to succeed.
• • A core aspect of this role involves embracing and championing a robust DevOps mindset. Our infrastructure is meticulously managed as code, leveraging Terraform for declarative configuration across our cloud environments.
• • Deployment is orchestrated through Kubernetes, and we utilize self-hosted CI/CD runners to maintain control and efficiency over our development pipelines.
• • This means you will be working with a modern, well-architected, and highly automated technology stack, providing a fertile ground for innovation and optimization.
• • Cosuno views security and compliance not as mere bureaucratic hurdles or checkboxes, but as integral components of our product and our commitment to building trust with our enterprise clientele.
• • You will be instrumental in embedding a 'compliance as a product' philosophy, ensuring these critical aspects are woven into the fabric of our development and operational processes.
• • Collaboration is fundamental to our culture. You will work in close concert with our talented Full Stack Engineering team, who are equipped and ready to provide support on infrastructure-related tasks when their capacity allows, fostering a synergistic relationship.
• • In your initial months, your impact will be immediate and tangible. You may be tasked with leading the charge to complete our ISO 27001 certification, establishing the rigorous processes and documentation required for its successful attainment and ongoing maintenance.
• • You will take direct ownership of our Terraform configurations across both AWS and GCP, focusing on enhancing their structure, reliability, and scalability to support future growth.
• • A crucial part of securing new business involves responding to detailed security questionnaires from potential enterprise customers. Your expertise will be vital in streamlining this process, thereby accelerating our sales cycles.
• • Furthermore, you will refine and optimize our employee IT onboarding procedures and access management protocols across our diverse stack of SaaS tooling, ensuring a secure and efficient experience for all new and existing team members.
• • This role offers a unique opportunity to shape the future of Cosuno's technological foundation, directly influencing our ability to serve enterprise clients securely and reliably, and to scale effectively in a competitive market.
• • You will be the guardian of our digital assets, the architect of our secure future, and a key driver of our operational excellence.
• • Your strategic vision and hands-on execution will be critical in navigating the complexities of cloud infrastructure, Kubernetes orchestration, and stringent compliance requirements.
• • By taking full ownership, you will not only contribute to the company's success but also grow your own expertise in a dynamic and supportive environment.
• • This is a chance to make a significant mark on a rapidly growing B2B SaaS startup that is revolutionizing a traditional industry through cutting-edge technology.