Information Security Consultant

RST Beratung

Consultant in information security at RST providing individualized strategies to protect client information assets. Engaging in a variety of security projects remotely with a focus on practical implementation.

Posted 5/3/2026full-timeRemote • 🇩🇪 GermanyMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

Advising on the establishment and improvement of ISMS and BCMS across various industries and company sizes.
Advising on the integration and implementation of regulatory requirements such as the BSI Act, the KRITIS umbrella law, DORA (Digital Operational Resilience Act), and other standards.
Planning and conducting risk assessments and risk treatment with the aim of ensuring effective controllability (KPIs, roadmaps, prioritization).
Developing concepts and governance/rulebooks for clients in regulated sectors (KRITIS, NIS-2, KRITIS umbrella law).
Performing internal audits and preparing and supporting our clients for certification to ISO 27001 and/or TISAX.
Preparing and executing emergency/incident exercises.
Participating in internal projects, structuring our collective knowledge across the firm, and further developing our consulting approach.

Requirements

What you’ll need

At least 3 years of practical experience in a management consultancy advising on information and IT security topics.
University degree or equivalent experience in one or more of our core areas, e.g., IT security, (business) informatics/computer science, business administration, or security management.
Required knowledge of standards and methods: ISO 27001, ISO 22301, TISAX.
Optional: ISO 27031, DORA, BSI IT-Grundschutz, etc.
Nice-to-have (not mandatory): CISM/CISA, ISO 27001 Auditor, experience as an external CISO/ISB, IT-Grundschutz practitioner/consultant, Certified ITSC-Manager, etc.
Very good German language skills and good English skills.

Benefits

Comp & perks

Corporate fitness program
Team events: Because “we” is more than just a word.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

risk assessmentrisk treatmentISMSBCMSinformation securityIT securitygovernanceinternal auditsemergency exercisesincident exercises

Soft Skills

advisingplanningcommunicationconsultingstructuring knowledgecollaborationprioritizationorganizational skillsproblem-solvingleadership

Certifications

CISMCISAISO 27001 AuditorCertified ITSC-Manager