Senior GRC / ISMS Consultant

Role Overview

• Drafting policies in German and English.
• Conducting risk analyses.
• Establishing, operating, and optimizing ISMS in accordance with ISO 27001, IT-Grundschutz or NIST.
• Applying CIS Controls.
• Supporting clients in implementing cyber security projects across governance and technology domains.
• Applying common security frameworks using a risk-based approach.
• Evaluating IT security tools for suitability in client environments.

Requirements

• Experience with IT systems and IT operations as well as in cyber security projects.
• Solid understanding of common IT architectures and operating models (cloud, hybrid, agile project methods).
• Solid understanding of common network protocols and typical network topologies.
• Solid understanding of common cyber security frameworks for IT environments (ISO 27001, IT-Grundschutz, CIS Controls).
• Solid understanding of common cyber security frameworks for ICS/OT environments (IEC 62443, NIST SP 800-82, Purdue Model).
• Team player with commitment, a strong sense of responsibility and good self-reflection.
• Very good analytical thinking skills.
• A university degree is not required. Skills matter. Attitude matters more.
• Committed working students are warmly welcome.

Tech Stack

• Cloud
• Cyber Security

Benefits

• Challenging projects and exciting cyber security / IT tasks.
• Remote-first employment contract within a virtual company.
• Monthly in-person meetups. Annual company outing.
• High performance. High appreciation.
• Paid professional development is mandatory, not a luxury.
• A "Work Hard & Party Hard" culture.
• Company profit-sharing and individual performance bonus.
• Zero politics in a NO BS zone.
• Flexible mobility policy.
• Technical career track without people management responsibilities.
• Leaders who are accountable to our shared values.