Manager Information Security(m/w/x)

Requirements

• 2-4 years hands-on experience in Information Security or IT Security within NATO, EU, or German national classified environments
• Readiness to take expertise to next level in fast-moving, high-stakes setting
• Expert-level knowledge of ISO 27001 and BSI IT-Grundschutz
• Practical experience implementing, managing, or auditing ISO 27001 and BSI IT-Grundschutz frameworks
• Deep familiarity with VS-IT systems, accreditation processes, and compliance demands of classified networks
• Ability to hit the ground running without extensive onboarding
• Ability to thrive in dynamic environments
• Comfort advising engineers on security concepts
• Comfort preparing audit documentation
• Solid grasp of core security technologies (SIEM, PKI, IDS/IPS, cryptographic systems)
• Understanding of security technologies operation within classified/defence-grade environments
• Excitement for building Cyber SOC, NATO infrastructure, or scalable ISMS
• Desire to leave tangible mark on organization
• Active German security clearance (Ü2/Ü3 level) or eligibility/willingness to undergo formal vetting (SÜG)
• Understanding of responsibility in this space
• Relevant industry certifications (ISO 27001 Lead Auditor/Implementer or BSI-certified IT-Grundschutz Praktiker)
• Prior experience with NATO Security Policy frameworks
• Familiarity with NATO Classified Infrastructure accreditation requirements
• Familiarity with NATO CIS environments
• Exposure to EU security regulations and cross-border compliance requirements
• Experience supporting/contributing to Cyber SOC build-out
• Familiarity with SOC tooling, process design, operational workflows
• Knowledge of TEMPEST standards and physical security requirements
• Familiarity with NIS2 requirements and alignment steps
• Professional working proficiency in German and English
• Ability to collaborate effectively without translation support

Tasks

• Manage and continuously improve the ISMS.
• Ensure ISMS frameworks are audit-ready.
• Ensure ISMS meets ISO 27001 and BSI IT-Grundschutz.
• Advise delivery teams on security concepts.
• Consult on security concept implementation.
• Consult on security concept documentation.
• Ensure compliance with VS-NfD operational requirements.
• Plan, coordinate, and execute internal and external audits.
• Plan, coordinate, and execute penetration testing.
• Manage audit and testing findings to resolution.
• Maintain a culture of continuous security improvement.
• Design and establish NATO Classified Infrastructure.
• Navigate NATO compliance and accreditation requirements.
• Support the Cyber SOC build-out.
• Define Cyber SOC processes, tooling, and procedures.
• Develop, implement, and refine Incident Management procedures.
• Ensure swift and effective response to security events.
• Manage security events across classified and unclassified environments.
• Participate in monthly on-call rotations.
• Provide out-of-hours security support.
• Provide incident response coverage.

Work Experience

EducationMore information about education requirement

Languages

Tools & Technologies