About this role

Close collaboration with clients on the planning, implementation and operation of ISMS and compliance frameworks
Conducting gap analyses and deriving and prioritizing remediation measures
Developing and aligning policies, processes, role models, Statements of Applicability (SoA) and supporting evidence
Preparing for and supporting internal and external audits
Translating regulatory requirements into pragmatic, operational models
Regular communication with technical, organizational and management stakeholders

Experience in information security, ISMS, GRC, IT projects or process management
Enthusiasm for client-facing consulting and collaborative solution development
Ability to explain complex security topics clearly and understandably
Experience with ISO/IEC 27001 (or strong motivation to onboard quickly)
Knowledge of SOC 2, C5, NIS2 or GDPR is a plus
Tool affinity (e.g., Jira, Confluence, Microsoft 365/SharePoint)
Very good German and English language skills

Information Security Consultant

Key skills