Development and operation of an integrated management system (ISMS) according to ISO 27001 based on IT-Grundschutz
Integration of all security-relevant customer and standard requirements into security management systems
Drafting and maintaining security policies and concepts
Defining and implementing security-related processes
Conducting risk analyses and implementing improvement measures
Managing and coordinating external certification audits and regulatory audits

University degree in security management, business administration, computer science, business informatics or a related field; alternatively completed vocational training (e.g., IT specialist / Fachinformatiker)
Relevant professional experience in information security, ideally in Information Security Management
Experience implementing and maintaining ISO 27001 certification based on IT-Grundschutz
Good knowledge of relevant norms and standards (IT-Grundschutz, ISO 27001, BSI, technical guidelines, etc.)
Presentation skills, independent and structured working style, analytical and solution-oriented approach, and enthusiasm for developing your own ideas

Great team spirit in a competent, future-proof work environment with unique projects
Balanced work–life integration through flexible working models and hours and 30 days of annual leave
Top equipment, modern tech stack and innovative collaboration tools
Individual training and development opportunities as well as specialist and leadership programs
Attractive centrally located office
Sports partnerships, preventive health courses and running events
Company pension scheme and support measures for childcare and caregiving for relatives

Information Security Manager – Classified Communications

Key skills