ISMS consulting: setting up, implementing and continuously improving information security management systems in accordance with established standards (e.g., ISO/IEC 27001, NIS-2, TISAX, BSI IT-Grundschutz)
Security analysis: assessing existing measures and processes, identifying vulnerabilities and deriving optimization opportunities
Gap analyses & project coordination: conducting maturity assessments, planning appropriate measures and supporting them through to successful certification
Risk management: performing risk analyses and developing technical and organizational security measures
Policies & training: creating and updating security policies, guidelines and awareness concepts
Cross-functional collaboration: close cooperation with data protection, product development and other internal departments
Requirements
Degree in IT, information security or a comparable qualification
Several years of practical experience in establishing and managing ISMS, ideally in a consulting role
Deep understanding of relevant standards such as ISO/IEC 27001, NIS-2, BSI IT-Grundschutz and TISAX
Desirable recognized certifications such as ISO/IEC 27001 Lead Implementer, CISM or CISSP
Analytical thinking, a structured approach and a confident manner in client interactions
Business-fluent German and fluent English, both written and spoken
Benefits
Flexible, hybrid working model – remote possible
Competitive salary
Corporate fitness with Wellpass and attractive employee discounts
28 days of vacation and workation opportunities
€1,000 annual training budget for your personal development
Purpose-driven mission with room for participation and creative development
Regular team and company events to foster true cohesion
Modern office with ergonomic equipment, massages, snacks & drinks