ISMS Manager

ISCC – the International Sustainability and Carbon Certification

ISMS Manager managing and improving information security systems at ISCC in Cologne. Collaboration with IT teams, ensuring compliance with ISO/IEC 27001 standards.

Posted 6/8/2026full-timeKöln • 🇩🇪 GermanyMid-LevelSenior💰 €50,000 - €60,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Managing and continuously improving the Information Security Management System (ISMS) in line with ISO/IEC 27001 requirements
Ensuring the effective execution and maintenance of the PDCA cycle within the ISMS framework
Preparing, coordinating, and documenting internal and external ISMS meetings, audits, and management reviews
Collecting, structuring, and maintaining ISMS-related evidence and archiving
Collaborating closely with IT teams to ensure implementation and effectiveness of security controls
Advising business stakeholders on the implementation of information security controls, with a focus on cloud services and external IT providers
Securing certification readiness and ensuring ongoing compliance with relevant information security standards and requirements
Working closely with the CISO and supporting the DPO (Data Protection) and contributing to the further development of the information security function

Requirements

What you’ll need

University degree in Cyber Security, Information Systems, Business Informatics, IT Security or a related field
First practical experience in information security, IT governance, compliance or risk management through internships, working student roles or university projects
Basic understanding of Information Security Management Systems and ISO/IEC 27001 concepts
Familiarity with security controls, risk assessments and structured documentation practices
Initial exposure to EU regulatory frameworks related to information security and data protection considered an advantage
Relevant certifications such as ISO/IEC 27001 Foundation, ISO/IEC 27001 Internal Auditor, CompTIA Security+, ISC2 Certified in Cybersecurity (CC) or Microsoft Security Fundamentals already completed or in progress is a plus
High level of integrity, confidentiality awareness and responsibility when handling sensitive information
Good communication skills enabling effective collaboration in an international and cross-functional environment
Excellent German and English language skills (at least C1, written and spoken)

Benefits

Comp & perks

Great Team Environment
Various team events throughout the year (Celebrating Diversity, Summer Team Event, Christmas Party)
Work-Life Balance
Hybrid set-up
4 weeks remote work at a place of choice (after probation)
Flexible working hours and trust based working time
30 vacation days and 3 additional vacation days (Christmas Eve, New Year’s Eve, Carnival Monday)
Sabbatical options
A generous pension scheme (bAV) in line with our sustainability values
JobTicket/Deutschlandticket
Annual bonus scheme based on performance
Wellness Programs
Subsidized Urban Sports Club
Health weeks promoting healthy habits in personal and professional life

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information Security Management System (ISMS)ISO/IEC 27001PDCA cyclesecurity controlsrisk assessmentsstructured documentationcloud servicesIT governancecompliancerisk management

Soft Skills

integrityconfidentiality awarenessresponsibilitycommunication skillscollaborationcross-functional teamwork

Certifications

ISO/IEC 27001 FoundationISO/IEC 27001 Internal AuditorCompTIA Security+ISC2 Certified in Cybersecurity (CC)Microsoft Security Fundamentals