ISMS consulting: setting up, implementing and continuously improving information security management systems in accordance with established standards (e.g., ISO/IEC 27001, NIS-2, TISAX, BSI IT-Grundschutz)
Security analysis: assessing existing measures and processes, identifying vulnerabilities and deriving optimization opportunities
Gap analyses & project coordination: conducting maturity assessments, planning appropriate measures and supporting them through to successful certification
Risk management: performing risk analyses and developing technical and organizational security measures
Policies & training: creating and updating security policies, guidelines and awareness concepts
Cross-functional collaboration: close cooperation with data protection, product development and other internal departments

Degree in IT, information security or a comparable qualification
Several years of practical experience in establishing and managing ISMS, ideally in a consulting role
Deep understanding of relevant standards such as ISO/IEC 27001, NIS-2, BSI IT-Grundschutz and TISAX
Desirable recognized certifications such as ISO/IEC 27001 Lead Implementer, CISM or CISSP
Analytical thinking, a structured approach and a confident manner in client interactions
Business-fluent German and fluent English, both written and spoken

Information Security Manager

Key skills