Advising clients in the areas of Cyber Security, Governance, Risk & Compliance (GRC)
Leading and managing security and compliance projects
Implementing, operating and further developing Information Security Management Systems (ISMS)
Creating, reviewing and improving security policies, concepts and processes (e.g., BSI IT-Grundschutz, ISO/IEC 27001, NIS-2)
Conducting risk analyses, assessments and audits (e.g., ISO/IEC 27005, BSI IT-Grundschutz)
Supporting Business Continuity Management (BCM) and emergency planning (e.g., BSI 200-4, ISO/IEC 22301)
Collaborating with sales, internal teams and external stakeholders
Transferring knowledge to clients and internal colleagues

Several years of professional experience (typically 5+ years) in Cyber Security and/or IT compliance
Solid experience in client advisory and in leading or managing projects
Very good understanding of regulatory requirements and security frameworks (e.g., BSI, ISO/IEC 2700x, NIS-2, KRITIS)
Relevant certifications in Cyber Security and/or IT compliance
Strong analytical and communication skills
Structured, self-directed way of working
Business-fluent German (minimum C1)
Willingness to travel occasionally for business (approx. 1–2 days per week)
Class B driver's license
Nice-to-have: Experience in data protection (especially GDPR), knowledge of regulatory requirements in the AI domain (e.g., EU AI Act), experience using modern AI tools in a consulting context

Senior Cyber Security and Compliance Consultant

Key skills