Senior Manager - Infrastructure Security

Requirements

• Large Scale Cloud Operations: Experience managing security consistency across a complex, multi-account environment within both AWS and GCP.
• Security Compliance: Familiarity with implementing technical controls to meet industry standards such as SOC2, ISO 27001, or PCI DSS.
• Advanced Certifications: Professional level credentials such as the AWS Security Specialty, Google Professional Cloud Security Engineer, or CISSP.
• Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you're in good shape, then we're in good shape.
• Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week
• We offer 27 days holiday with an extra day on 2nd and 3rd year of service
• We will support you in developing yourself and your career growth opportunities: 1.000 € Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.
• Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Gym
• Cash. Dough. Cheddar. Whatever you call it, we'll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan
• The power of getting together over some food is unrivaled. Here are a few ways to help y

Benefits

Additional Information

We are on the lookout for a Senior Manager, Infrastructure Security . In this pivotal role, you will lead the strategy for protecting our cloud and corporate environments by reducing real-world risk without slowing down the business. You will champion a "Secure by Design" philosophy, ensuring that security is a collaborative engineering challenge where automated guardrails and technical excellence enable our platform to scale rapidly and securely by default. As a Senior Manager, you will build and lead a mission-oriented team of engineers, fostering a culture where technical excellence, automation, and professional growth are central to our operations. You will move away from reactive auditing, instead focusing on the engineering of non-negotiable technical gates that prevent misconfiguration at the source. Your leadership will be defined by the ability to co-design the "how" with Engineering and IT, co-authoring architectural blueprints that are technically viable and operationally frictionless. By driving the transition toward Security-as-Code and consistent enforcement across 100% of our assets, you will directly influence the resilience and velocity of the world's leading local delivery platform. Lead and Mentor a High-Performing Team: Champion a culture of technical excellence and professional growth, enabling the team to drive strategic infrastructure resilience and long-term career success. Drive Infrastructure Security Maturity: Define the strategic roadmap for our core domains to ensure maximum risk reduction and operational efficiency across our global cloud and corporate infrastructure. Engineering Ownership and Enablement: Partner with tech verticals to provide the tooling, visibility, and expertise required for Engineering to own their security outcomes. Automate Preventive Guardrails: Replace reactive manual checkpoints with automated policy-as-code and admission controls to validate or reject changes before they reach production. Standardize Global Security Baselines: Eliminate ad-hoc configurations by architecting unified, version controlled security standards across our entire cloud and corporate infrastructure. Drive Vulnerability Governance: Architect scalable processes and automation to identify, prioritize, and remediate infrastructure risks, ensuring a measurable reduction in our attack surface. Proven Engineering Leadership: You have a track record of building and leading high performing engineering teams in complex global environments. Cloud Security Expertise: You possess deep technical knowledge of AWS and GCP security architectures including identity boundaries, network isolation, and resource hardening. Security as Code Mindset: You are proficient in driving automation through Terraform, CloudFormation, or similar infrastructure as code tools to enforce security standards. Modern Preventive Controls: You have experience implementing admission controllers and policy engines such as OPA, Gatekeeper, or Kyverno to automate production guardrails. Strategic Risk Management: You can translate complex technical vulnerabilities into clear business risks and prioritize remediation efforts based on actual threat impact. Collaborative Influence: You are an expert at partnering with SRE, DevOps, and Platform Engineering teams to co-design security solutions that enhance rather than hinder developer velocity. Operational Excellence: You have experience architecting vulnerability management programs that leverage automation to handle patching and configuration drift at a massive scale.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at Deliveryhero? Share your experience