Description

As an Information Security Officer, you will lead the development and implementation of security strategies, ensuring compliance with international standards while fostering a culture of security across the organization. This role involves collaborating with various teams to enhance security architecture and manage external relationships.

Requirements

• •German nationality for customer and compliance engagements
• •7+ years of experience in information security, IT governance, or risk & compliance roles
• •Experience leading or preparing for BSI IT-Grundschutz certification
• •Familiarity with SOC 2, ISO 27001, or NIST 800-53
• •Experience with vendor management, SLAs, and contract review
• •Strong background in cloud-native security, especially AWS
• •Excellent cross-functional and stakeholder communication
• •Fluency in German and English
• •Experience in regulated sectors (space, energy, mobility, telecom, etc.)
• •Experience leading a Workplace IT or internal IT operations team
• •Knowledge of DevSecOps, secure CI/CD pipelines, or software supply chain security
• •Experience with Teleport, Auth0, or comparable IAM tooling

Tasks

• •Lead the Information Security Management System (ISMS)
• •Implement and maintain compliance with BSI IT-Grundschutz, SOC 2 Type II, and ISO 27001
• •Define and enforce internal security policies and access control models
• •Oversee the Workplace IT function and internal tooling
• •Manage relationships with external IT and security providers
• •Ensure audit readiness and documentation for certification bodies
• •Promote a culture of security through training and awareness initiatives
• •Evaluate new technologies and vendors for security compliance
• •Monitor and adapt to legal and regulatory requirements

Tools & Technologies

Benefits