Senior Consultant, Audit & Compliance

This is a fully remote position, open to applicants in Germany.

📋 Description

• Execute security audits and gap analyses in accordance with ISO 27001, BSI IT-Grundschutz, and NIS2.

• Assist organizations in their preparation for KRITIS audits and BSI documentation as stipulated in §39 BSIG.

• Establish and enhance Information Security Management Systems (ISMS).

• Provide guidance on the implementation of NIS2 requirements, including risk management, reporting obligations, supply chain security, and executive accountability.

• Conduct TISAX assessments for firms within the automotive supply chain.

• Generate risk assessments, security policies, and supporting documentation.

• Offer advice on the relationship between NIS2, GDPR, and industry-specific regulations (EnWG, TKG, DORA for the financial sector).

• Counsel on the application of the EU AI Act, covering risk classification of AI systems, conformity assessments, and documentation obligations.

• Assist in meeting the requirements of the Cyber Resilience Act (CRA) for manufacturers and importers of digital products.

• Provide training for executive management and senior leaders regarding their responsibilities under NIS2 (§38 BSIG).

⛳️ Requirements

• At least 5 years of professional experience in IT security auditing, compliance, or ISMS consulting.

• Certification as an ISO 27001 Lead Auditor or Lead Implementer (required).

• Strong understanding of the BSI IT-Grundschutz compendium and BSI standards 200-1/200-2/200-3/200-4.

• Proven experience with KRITIS audits and/or NIS2 implementation initiatives.

• Familiarity with the EU AI Act (risk classification, high-risk AI systems) and the Cyber Resilience Act (CRA) is highly advantageous.

• Knowledge of TISAX and VDA ISA is an added benefit.

• Experience in conducting risk assessments and formulating security concepts.

• Comprehension of the interaction between technical and organizational security measures.

• Fluent in German (mandatory) and proficient in English.

🏝️ Benefits

• Base salary starting at €80,000 with profit-sharing potential of up to €70,000.

• Flexible working hours and the option for remote work.

• 30 days of vacation.

• IT equipment provided, including an Apple MacBook.

• Regular team-building events.

• Corporate benefits, including a company pension scheme, health insurance, and discounts for shopping and employees.