Information Security Manager – Classified Information Communications
Bundesdruckerei-Gruppe
full-time
Posted on:
Location Type: Office
Location: Bonn • 🇩🇪 Germany
Visit company websiteJob Level
Mid-LevelSenior
About the role
- Development and operation of an integrated management system (ISMS) in accordance with ISO/IEC 27001 based on IT-Grundschutz (IT Baseline Protection)
- Integration of all security-relevant customer and standards/regulatory requirements into security management systems
- Creation and ongoing maintenance of security policies and security concepts
- Definition and implementation of security-related processes
- Conducting risk analyses and implementing remediation and improvement measures
- Management and coordination of external certification audits and regulatory inspections
Requirements
- Degree in Security Management, Business Administration, Computer Science, Business Informatics or a related field
- Alternatively, completed vocational training (e.g., IT specialist)
- Relevant professional experience in information security, ideally in information security management
- Experience implementing and maintaining ISO/IEC 27001 certification based on IT-Grundschutz (IT Baseline Protection)
- Good knowledge of relevant standards and guidelines (IT-Grundschutz, ISO/IEC 27001, BSI, technical guidance, etc.)
Benefits
- Great team spirit in a competent, future-proof working environment with unique projects
- Balanced work–life integration thanks to flexible working models and hours, plus 30 days' annual leave
- Top equipment, modern tech stack and innovative collaboration tools
- Individual training and development opportunities, including specialist and leadership programs
- Attractive, centrally located office
- Sports partnerships, preventive health courses and running events
- Company pension plan, and support measures for childcare and caring for relatives
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
ISO/IEC 27001IT-Grundschutzsecurity management systemsrisk analysissecurity policiessecurity conceptssecurity-related processesremediation measuresimprovement measuresexternal certification audits