Information Security Officer (ISMS)

Quick Facts

• Role: Information Security Officer responsible for ISMS lifecycle and embedding information security

Description

You will introduce, operate, and continuously improve the organization’s ISMS and ensure information security is sustainably anchored throughout the business. The role includes supporting ISO 27001 audits and ensuring initial certification and recertification, plus advising leadership and employees on information security topics. You will also help coordinate information security incidents, support emergency concepts, and promote security awareness through training and sensitization measures.

Responsibilities

• Introduce, run, and further develop the ISMS; accompany audits and ensure ISO 27001 initial certification and recertification

• Identify, assess, and monitor information security risks and track remediation measures

• Advise the board, executives, and employees on all information security topics, including regular reporting

• Coordinate information security incidents; contribute to emergency concepts and drive security awareness via training and awareness activities

• Support IT leadership with administrative and coordination tasks—especially license management—while maintaining the independence of the ISB function

Requirements

• Degree in Computer Science, Business Informatics, Information Security, or equivalent; relevant certifications preferred (e.g., CISSP, CISM, ISO 27001 Lead Implementer)

• Multi-year practical experience in information security, IT governance, compliance, or risk management

• Sound knowledge of standards and frameworks such as ISO 27001, BSI IT-Grundschutz, NIS2, and TISAX

• Structured, analytical, independent working style with strong understanding of risks and security requirements

• Strong communication skills and ability to convey complex topics in an audience-appropriate manner

• High integrity, strong sense of responsibility, and motivation to embed information security sustainably

Benefits

• Opportunity to sustainably integrate information security across the company and shape governance, risk, and compliance processes