Creation and further development of Information Security Management Systems (ISMS)
Development and maintenance of Information Security Management Systems (ISMS) according to ISO 27001, BSI IT-Grundschutz or TISAX
Support and execution of security audits and reviews
Conducting cyber risk assessments
Designing and delivering training, workshops and awareness measures
Preparing security analyses for IT and cyber projects
Preparation and execution of audits, inspections and reviews, including ISMS, NIS2, KRITIS and DORA, BSI IT-Grundschutz
Information classification and determination of protection requirements
Development of concepts for the prevention and mitigation of threats and attacks
Advising clients on the selection, implementation and operation of IT security solutions

Requirements

Completed degree in (business) computer science, business administration or comparable qualification, or several years of relevant professional experience
Significant professional and project experience in the areas of cyber security, information security and incident/emergency management
Overview and expertise in at least one area such as Cloud Security, SIEM, Security Testing, Vulnerability Management, Incident Management or Identity & Access Management
Knowledge of standardized frameworks and recommendations such as BSI IT-Grundschutz, ISO 2700x, B3S, ISO 31000, etc.
Knowledge in the areas of BCM, GDPR, NIS2, KRITIS and other standards (NIST, COBIT2019, ISO900X/2000X) is an advantage
Preferably: demonstration of expertise through relevant certifications (e.g.: IT-Grundschutz Practitioner/Consultant/Auditor, ISO27001 Auditor, ISO/CISO, CISSP, TISP, CISA, CISM, CSP, ISP, etc.)
Very good German and English language skills, both written and spoken.

Benefits

Above-average work–life balance through flexible working models (50–100%)
30 days of vacation and the option for workation
Company supplementary health insurance
Individual onboarding, training opportunities (particularly professional certifications according to an individual development plan) and career prospects for long-term collaboration, also in an international context
Direct communication and short decision paths: flat hierarchies

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Information Security Management SystemsISO 27001BSI IT-GrundschutzTISAXcyber risk assessmentssecurity auditsVulnerability ManagementIncident ManagementCloud SecuritySecurity Testing

Soft Skills

advising clientstrainingworkshopscommunicationorganizational skills

Certifications

IT-Grundschutz PractitionerISO27001 AuditorISO/CISOCISSPTISPCISACISMCSPISP