Information Security Consultant – 100% Remote

RST Beratung

Consultant for information security in a specialized consulting company focusing on customized strategies for protecting information assets. Role involves on-site client consultation and project management.

Posted 6/3/2026full-timeRemote • 🇩🇪 GermanyMid-LevelSeniorWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ISO 27001ISO 22301TISAXrisk analysisrisk treatmentinternal auditsemergency exercisescontingency planninginformation securityIT security

Soft Skills

client relationship managementindependent project responsibilitypragmatic approachself-organizationanalytical skillsteam playercommunication skillsstructured approachprioritizationcollaboration

Certifications & Qualifications

CISMCISAISO 27001 auditorexternal CISOInformation Security OfficerIT Baseline Protection practitionerCertified ITSC Manager

Industry Keywords

ISMSBCMSBSI ActKRITISNIS-2DORAregulatory requirementsconsultancy environmentsecurity managementbusiness administration

About the role

Key responsibilities & impact

Advising on the establishment and improvement of ISMS and BCMS across various industries and company sizes.
Advising on the integration and implementation of regulatory requirements from the BSI Act, the KRITIS umbrella law, DORA and other standards.
Planning and implementing risk analyses and risk treatment aimed at effective manageability (KPIs, roadmaps, prioritization).
Developing concepts and policies for clients in regulated industries (KRITIS, NIS-2, KRITIS umbrella law).
Conducting internal audits and preparing and supporting our clients for certification to ISO 27001 and/or TISAX.
Preparing and conducting emergency/contingency exercises.
Participating in internal projects, structuring our collective knowledge and further developing our consulting approach.

Requirements

What you’ll need

Minimum 3 years of practical experience in a consultancy environment advising on information and IT security.
Degree or comparable experience in one or more of our core areas, e.g., IT security, (business) computer science, business administration, security management.
Knowledge of standards and methods: Must: ISO 27001, ISO 22301, TISAX.
Nice-to-have (not required): CISM/CISA, ISO 27001 auditor, external CISO/Information Security Officer (ISB), IT Baseline Protection practitioner/consultant, Certified ITSC Manager, etc.
Able to build and maintain long-term client relationships on an equal footing.
Willing to take independent project and client responsibility.
Pragmatic approach with the ability to translate information security requirements into understandable measures and prioritize them.
Excellent self-organization and a structured, analytical approach to tasks.
A team player.
Very good German skills, good English skills.

Benefits

Comp & perks

Corporate fitness program.
Team events: Because "we" is more than just a word.