Information Security Officer (ISMS/CISO)

Quick Facts

• Role: Information Security Officer (ISMS/CISO)

• Location: Frankfurt

Description

You will build, develop, and operate the Information Security Management System (ISMS) and act as the central contact for information security. The role includes maintaining security policies and processes, performing risk analyses and protection-need assessments, monitoring TOM measures, and supporting internal and external audits. You will also analyze security incidents, drive awareness and training, and provide advisory support across business processes.

Responsibilities

• Build, develop, and operate the ISMS

• Central point of contact for all information security questions

• Collaborate with the Data Protection Officer, IT management, and relevant specialist departments

• Create, maintain, and further develop information security policies, rulebooks, processes, and procedure descriptions

• Conduct and support risk analyses, protection-need determinations, and action plan creation

• Monitor and evaluate technical and organizational measures (TOM)

• Prepare for, conduct, and follow up internal audits and management reviews; support external audits and certifications

• Analyze security incidents and derive and track appropriate measures

• Plan and conduct information security awareness measures and training

• Provide expert support and consulting for process owners, product management, and national/international DQS Group entities

Requirements

• Completed technical/IT degree or equivalent training with relevant experience

• Multi-year experience in IT, information security, or ISMS management

• Very good knowledge of relevant standards, especially ISO/IEC 27001 (ideally also ISO/IEC 27002, ISO 22301, TISAX, or BSI IT-Grundschutz)

• Solid knowledge of applicable legal and regulatory requirements

• Ideally: certification or training as Information Security Officer / CISO

• Experience with IT project and stakeholder management

• Analytical, structured, and independent working style

• Strong communication and consulting skills; confident interaction with management and subject areas in German and English

• Willingness to actively develop information security and embed it within the organization

Benefits

• Collaborative and structured onboarding

• Ongoing training and development opportunities

• Performance-based compensation

• Flexible working hours and hybrid work

• Modern facilities and pleasant working environment in an international, modern setting

• Attractive team culture and engaging projects