Senior Information Security Expert

This is a fully remote position, open to applicants in Germany.

📋 Description

• Enhance the Information Security Management System (ISMS), along with its related policies, processes, and controls.

• Organize, assist, and monitor both internal and external audits, especially those aligned with ISO/IEC 27001:2022 standards.

• Evaluate information security risks.

• Perform security assessments for suppliers and third parties.

• Provide guidance to business units, IT, DevSecOps, and management.

• Assist in managing security incidents, vulnerabilities, and initiatives related to business continuity and disaster recovery.

• Promote security awareness within the organization.

• Create reports, KPIs, and materials for decision-making.

• Collaborate with the CISO to advance the ISMS.

⛳️ Requirements

• Several years of pertinent experience in information security management.

• Completed degree or vocational training in information security, computer science, business informatics, or a similar qualification; relevant professional experience may compensate for formal qualifications.

• Strong practical understanding of ISO/IEC 27001:2022.

• Familiarity with information security risk management and control assessment.

• Experience in facilitating internal and external audits.

• Awareness of applicable regulatory requirements, such as DORA and NIS2.

• Background in managing customers' contractual security obligations.

• Experience in supplier security, security awareness, and business continuity.

• Cloud security or DevSecOps experience is preferred.

• Organized, independent, and pragmatic work approach.

• Excellent communication and consulting abilities.

• Proficient in German at C1 level.

• Competent in English.

• Certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISM, CISSP, or CRISC are beneficial.

🏝️ Benefits

• 30 days of annual leave.

• Option to take unpaid leave.

• Guaranteed special leave on New Year's Eve.

• Opportunities for training and professional development.

• TicketPlusCard with a monthly allowance.

• Company pension scheme (20% employer contribution to direct insurance).

• Employer-funded support fund.

• JobRad bicycle leasing.

• Group accident insurance.

• Location-based team events.

• Corporate Benefits (employee discounts).

• Flexible working hours.

• Option to work from home within Germany.