Information Security Expert

This is a fully remote position, open to applicants in Germany.

📋 Description

• Enhance the information security management system along with associated policies, processes, and controls.

• Assist in preparing for, supporting, and following up on both internal and external audits, especially those related to ISO/IEC 27001:2022.

• Evaluate information security risks.

• Perform security assessments for suppliers and third-party entities.

• Provide advice to business departments, IT, DevSecOps, and management in a clear and solution-focused manner.

• Aid in handling security incidents, vulnerabilities, business continuity, and disaster recovery initiatives.

• Enhance security awareness across the organization.

• Generate reports, KPIs, and materials for decision-making.

• Assist the CISO in progressing the information security management system.

⛳️ Requirements

• Relevant professional experience in information security management, preferably within a regulated or customer-regulated setting.

• A completed degree or vocational training in information security, computer science, business informatics, or an equivalent qualification.

• Practical expertise in ISO/IEC 27001:2022, information security risk management, and control assessment.

• Fundamental understanding of or hands-on experience with pertinent regulatory and legal obligations, such as DORA and NIS2.

• Experience with specific contractual security requirements from customers is a plus.

• Background in supplier security, security awareness, and business continuity is beneficial.

• Experience in cloud security or DevSecOps is desirable.

• A structured, independent, and pragmatic approach to work.

• Excellent communication and consulting abilities.

• Proficient in German at C1 level.

• Good command of the English language.

• Certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISM, CISSP, or CRISC are advantageous.

🏝️ Benefits

• 30 days of annual leave.

• Option to take unpaid leave.

• Guaranteed special leave on New Year's Eve.

• Training and professional development opportunities.

• TicketPlusCard with a monthly allowance.

• Company pension scheme with a 20% employer contribution to direct insurance.

• Employer-funded support fund.

• JobRad bicycle leasing.

• Group accident insurance.

• Location-based team events.

• Corporate Benefits employee discounts.

• Flexibility in work hours.

• Remote work from home within Germany.