Information Security, Compliance & Internal Controls Manager – ISO 27001

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, enhance, and systematically prepare the organization for an Information Security Management System (ISMS) in accordance with ISO/IEC 27001, and for ISO 9001 certification.

• Analyze, evaluate, and implement regulatory obligations, particularly those stemming from the NIS2 Directive.

• Utilize the BSI IT-Grundschutz framework as a reference and apply relevant measures as needed.

• Establish, further develop, and oversee the annual audit of the Internal Control System (ICS) by the statutory auditor in compliance with PS 951 Type 2 / ISAE 3402.

• Organize and maintain compliance and security documentation in Confluence and Jira, ensuring audit-ready structures and workflows.

• Collaborate continuously with all teams to systematically collect and update security- and compliance-related information.

• Design, standardize, and enhance processes in information security, compliance, and internal controls.

• Prepare, coordinate, and assist in internal and external audits, including risk assessments and monitoring of remediation actions.

⛳️ Requirements

• 3–6 years of professional experience in information security, IT compliance, or ISMS.

• Practical experience with ISO/IEC 27001, encompassing implementation, operation, or auditing.

• Strong knowledge of regulatory requirements, such as the NIS2 Directive, GDPR, and IT security standards.

• Experience in establishing and maintaining organized documentation and processes.

• Familiarity with BSI IT-Grundschutz and/or quality management according to ISO 9001 is a plus.

• Experience with internal audits or supporting certification processes is an advantage.

• Basic technical knowledge of cloud and IT architectures.

• Proficiency in Confluence and Jira or similar tools is advantageous.

• Ability to clearly communicate complex requirements and implement them in a pragmatic manner.

• Fluent in German with good English language skills.

🏝️ Benefits

• 100% remote position with a high degree of flexibility in working hours.

• Competitive salary.

• Automatic salary increases based on KPIs.

• Attractive annual bonuses.

• 30+ days of paid annual leave.

• Fully equipped premium home office setup.

• Company (e-)bike.

• Employer-sponsored supplementary health insurance.

• Additional corporate benefits.

• Opportunity to work in an international environment with one of the world’s leading cloud providers in the SAP ecosystem.