Information Security Specialist (m/w/d)

Quick Facts

Information Security Specialist (m/w/d)

Description

Drive the development and governance of technical security standards and concepts to protect IT systems. Analyze risks, vulnerabilities, and security incidents, define security requirements (hardening, patching, IAM, encryption, logging & monitoring), and ensure Security-by-Design. Support ISMS operations, risk measures, and audit preparation and execution under ISO 27001 and NIS2.

Responsibilities

• Develop and govern technical security requirements and concepts to secure IT systems
• Support implementation of security requirements with operational IT teams
• Analyze risks, vulnerabilities, and security incidents; derive measures to minimize risk
• Define requirements for hardening, patch management, access controls (IAM), encryption, and logging & monitoring; verify compliance
• Help build and evolve structured asset management, including protection-need and classification approaches
• Define security requirements, conduct architecture and security reviews, and ensure security-by-design
• Serve as an interface between ISMS and IT by translating regulatory requirements into practical controls
• Contribute to running and improving the ISMS (risk analyses, measure steering, audit preparation)
• Prepare and perform audits, especially for ISO 27001 and NIS2
• Participate in cross-functional projects and embed security aspects from the start

Requirements

• Successfully completed degree in (Business) Informatics, IT Security, or comparable qualification
• 3–5 years of experience in information security
• Knowledge of management systems, risk analyses, emergency/incident management, and security incidents
• Technical understanding of security measures for networks, systems, IAM, and logging
• Sound knowledge of relevant standards and regulations such as ISO 27001, NIS2, and BSI Grundschutz
• Ideally: qualification as ISMS Manager, Information Security Officer, or Auditor
• Experience with vulnerability analysis, risk analysis, security reviews, or incident assessment
• Ability to work in a steering (non-operational) role: define requirements and accompany measures
• Analytical, structured working style with targeted prioritization
• Secure communication in German and English
• Team player with drive and willingness to take responsibility

Benefits

• Flat hierarchies, exciting projects, and open communication culture
• Individual development opportunities
• Hybrid work model for work-life balance
• Flexible working hours
• 30.5 vacation days
• Free parking
• Massage offers and free drinks
• Training opportunities
• Employee events
• Company pension plan (betriebliche Altersvorsorge)
• Additional corporate benefits