Information Security Manager

Quick Facts

• Role: Information Security Manager

• Work model: Hybrid or remote (Freiburg)

Description

You will serve as the central point of contact for information security for the Content & Solutions business area, supporting development teams and (large) customers. You will implement and run a local ISMS, translate corporate security policies into practical requirements for day-to-day development, and support security reviews, risk analyses, and security measures. The role combines hands-on project involvement with advisory and coordination responsibilities.

Responsibilities

• Provide information security guidance for development teams and customers

• Translate corporate security policies and IS requirements into practical solutions for the business group

• Hands-on support for teams applying best practices and implementing security requirements (implementation ownership remains with teams/Product Owners)

• Act as the information security expert in the sales process and communicate the importance of security

• Implement and operate the local ISMS and support execution of the information security strategy

• Perform risk analyses and security assessments; coordinate suitable security measures

• Coordinate and support recurring security reviews for products

• Work closely with Corporate Information Security and Group Data Protection

Requirements

• Several years of professional experience in information security, ideally connected to software development

• Strong communication skills with a customer-oriented approach; able to explain complex security topics clearly

• Relevant degree (e.g., computer science, business informatics, IT security) or comparable qualification

• Solid knowledge of security standards/frameworks such as ISO 27001, NIS-2, CRA, NIST, or COBIT

• Hands-on mindset to develop practical, implementable security solutions

• Experience collaborating laterally with different stakeholders; proactive and pragmatic approach

• Very good German and English (at least C1) in speaking and writing

• Certifications like CISM, CISSP, or ISO 27001 Lead Auditor are welcome (not required)

Benefits

• Opportunity to shape information security directly in product development

• Hands-on role blending advisory, coordination, and implementation support

• Hybrid/remote work option based in Freiburg