About this role

Close collaboration with clients in planning, implementing and operating ISMS and compliance frameworks
Conducting gap analyses and deriving and prioritizing remediation measures
Drafting and aligning policies, processes, role models, Statements of Applicability (SoA) and evidence
Preparing for and supporting internal and external audits
Translating regulatory requirements into practical operational models
Regular communication with technical, organizational and management stakeholders

Experience in information security, ISMS, GRC, IT project management or process management
Enjoyment of client-facing consulting and co-developing solutions
Ability to explain complex security topics clearly and understandably
Experience with ISO/IEC 27001 (or strong motivation to get up to speed quickly)
Knowledge of SOC 2, C5, NIS2 or GDPR is an advantage
Tool affinity (e.g., Jira, Confluence, Microsoft 365/SharePoint)
Very good German and English skills

Information Security Consultant – m/f/d

Key skills