IT Security Consultant

Quick Facts

• Role: IT Security Consultant

Description

Advise regulated organizations—particularly financial institutions and KRITIS sectors—on implementing IT security and compliance requirements such as DORA and NIS2. Develop, implement, and optimize ISO 27001–based ISMS and adapt them to regulatory demands. Support information risk, outsourcing, and security management, including security concepts, audits, and compliance assessments.

Responsibilities

• Consult regulated companies on implementation of DORA, NIS2, and other IT security requirements
• Develop, implement, and optimize ISMS according to ISO 27001 and adapt them to regulatory requirements
• Support information risk, outsourcing, and security management and implement concrete security measures
• Design processes to monitor and manage IKT service providers and ensure effective oversight
• Conduct gap analyses, risk analyses, and business impact analyses; support internal audits and compliance assessments
• Develop security concepts, offers, and regulatory frameworks for clients; actively contribute to security strategy

Requirements

• Completed degree in (business) informatics, security, or comparable training
• Knowledge of compliance requirements in regulated industries (e.g., DORA, VAIT, BAIT) and KRITIS sectors (NIS2)
• Experience implementing technical and organizational protection measures in regulated environments and advising organizations
• Solid practical knowledge in implementation and compliance for information security, IT security, data protection, cyber security, IT governance, BCM and disaster recovery, IT compliance, and IT risk management
• Relevant knowledge and certifications for building ISMS; advantageous: IT-Grundschutz consulting certifications, CISSP, ISO/IEC 27001 Lead Auditor
• Confident use of AI tools in the field, with critical evaluation of results; support clients in realizing AI potential
• Very good German and good English for confident communication

Benefits

• Ongoing growth through extensive training offerings
• Health support via sports subsidies and shared events
• Flexible work and a balanced work-life relationship
• Culture focused on openness, ownership, and shared success