The FotoFinder Group …
FotoFinder GROUP, with its industry-leading brands FotoFinder and DermLite, is a globally active medical device company specializing in AI-powered imaging systems for dermatologists. As a fast-growing, mid-sized with 150 employees, we are driven by our mission to give people around the world access to advanced skin diagnostic technologies to prevent skin cancer.
With over 30 years of innovation and a presence in more than 100 countries, we are recognized worldwide for our excellence and technological leadership in digital skin imaging. We work closely with the leading scientists, dermatologists and physicians – united by our passion for improving skin health through technology.
Headquartered in Bad Birnbach, Germany, and California, USA, we combine global reach with the agility and personal touch of a family-owned business. If you're looking for a place where your ideas matter, your impact is visible, and innovation is part of the everyday – join us in shaping the future of skin imaging.
To drive the growth of our business in Italy we are looking for a
Service Owner – IT Security & Infrastructure Protection
m/w/d
Employment Type: Hybrid | Full-time
Start Date: As soon as possible
Protect the Digital Foundation of Healthcare Innovation
At FotoFinder, we develop world-leading medical imaging, AI-powered diagnostics and connected digital health solutions that help physicians detect skin cancer earlier and improve patient care worldwide. As our portfolio continues to evolve towards cloud-based platforms, AI-enabled applications and connected medical devices, cybersecurity and resilient IT infrastructure have become fundamental to our success.
We are looking for a Service Owner – IT Security & Infrastructure Protection who is passionate about building secure, resilient and future-ready IT services. In this role, you will own and continuously develop FotoFinder's global cybersecurity and infrastructure protection capabilities across our hybrid Microsoft and AWS environment. Working closely with IT, Software Engineering, AI, Product Management and external partners, you will help protect our business, our customers, our innovations and the sensitive healthcare data entrusted to us while enabling the next generation of digital MedTech solutions.
Why Join FotoFinder?
- Shape the cybersecurity strategy of a global MedTech company.
- Work with Microsoft Defender, Sentinel, AWS Security and Zero Trust technologies.
- Protect AI, cloud and connected medical device platforms.
- Collaborate internationally with Product, Software, AI and Infrastructure teams.
- Help build a secure foundation for FotoFinder's SaaS transformation.
Your responsibilities
As the Service Owner for IT Security & Infrastructure Protection, you will shape the future of FotoFinder's global cybersecurity landscape. You will own the strategy, roadmap and continuous improvement of our security and infrastructure services, ensuring secure, reliable and compliant operations across all company locations. Working closely with internal teams and external partners, you will enable a secure digital foundation for our business applications, cloud platforms, AI solutions and connected medical products.
Cybersecurity Service Ownership
- Own the global IT Security & Infrastructure Protection service across all FotoFinder entities.
- Define the service strategy, roadmap, governance model and KPIs.
- Continuously improve security services and manage strategic partners.
Infrastructure & Cloud Security
- Protect hybrid Microsoft and AWS environments.
- Implement Zero Trust architecture, infrastructure hardening and vulnerability management.
- Drive cloud security best practices for SaaS platforms and connected medical products.
Identity, Security Operations & Incident Response
- Own IAM, MFA, PAM and Conditional Access.
- Lead Microsoft Sentinel (SIEM), MDR and security monitoring.
- Coordinate incident response and cyber crisis management.
Compliance, Risk & Security Governance
- Develop the ISMS and ensure compliance with ISO/IEC 27001, MDR, GDPR, NIS2 and the Cyber Resilience Act.
- Lead security risk assessments, supplier reviews and governance.
Business Partnership & Security Enablement
- Partner with Software Engineering, AI, Product Management, Quality and Service.
- Support DevSecOps and secure software development.
- Promote security-by-design and cybersecurity awareness.
Your Profile
Required Qualifications
- Bachelor's or Master's degree in Computer Science, Cybersecurity or related field.
- 7+ years of cybersecurity and infrastructure experience.
- Microsoft Defender XDR, Sentinel, Entra ID, Intune and Microsoft 365 Security.
- AWS Security including IAM, GuardDuty, Security Hub, Inspector, CloudTrail, WAF and KMS.
- Experience with SIEM, MDR, IAM, PAM, endpoint protection and Zero Trust.
- Knowledge of ISO/IEC 27001, ISO 13485, IEC 62304, MDR, GDPR, NIS2 and CRA.
- DevSecOps, hybrid cloud security and stakeholder management.
- Fluent English.
Nice to Have
- CISSP/CISM/CCSP/AWS Security Specialty.
- Medical device or healthcare experience.
- Penetration testing and SaaS platform security.
Within your first 6–12 months, you will:
- Define the global security roadmap.
- Strengthen Microsoft Sentinel and Defender.
- Enhance AWS governance.
- Standardize IAM globally.
- Improve SIEM/MDR operations.
- Support secure SaaS transformation.
What We Offer
- A key role in shaping the future digital platform of a global MedTech leader
- Work on cutting-edge AI, imaging, and cloud technologies
- High degree of ownership and strategic impact
- Collaborative, international, and innovation-driven environment
- Flexible working model
Interested?
Then please send us your complete application documents by e-mail or post to:
FotoFinder Systems GmbH . Human Resources Department . Industriestr. 12 . 84364 Bad Birnbach
Phone: +49 (0) 8563 977200 . E-Mail: jobs[at]fotofinder.de
For data protection reasons, please send your application documents exclusively by e-mail to jobs@fotofinder.de and not to info@fotofinder.de.
Please also note the data protection information for applicants.