Coordination of external audits, including development of the audit plan taking into account the requirements of the standards as well as the organizational and process structure
Conducting on-site and remote audits to verify compliance with the standards, identify nonconformities and opportunities for improvement
Preparing audit reports to document findings
Technical review of inspection/test reports
Participation in training and continuing education to maintain up-to-date expertise in information security and ISO 27001

A university degree in an IT-related field is a must-have
At least 4 years of operational professional experience in the IT field — ideally in IT security, alternatively e.g. in administration, development or project management
Certification as an ISO 27001 Lead Auditor
Very good German and English skills for conducting audits and reporting in both German and English
Willingness to engage in continuous professional development and adapt to changing technologies and regulations
Strong communication skills and experience working with stakeholders
Willingness to travel for on-site audits within the DACH region

A permanent full-time position
Flexible working time model, working time account and remote work
30 days of vacation
Internal development opportunities and future career prospects
Strong focus on training and continuing education
Company car
Occupational pension scheme (BAV), capital-forming benefits (VWL), contribution to insurance offerings
Corporate benefits, sports offerings such as EGYM Wellpass, bike leasing, employee and team events, etc.

Lead Auditor – ISO 27001

Key skills