Senior Consultant, Audit & Compliance

🔥 11 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

APT-ONE

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2025

🔒 Cybersecurity

🏢 Enterprise

🏭 Manufacturing

Cybersecurity • Enterprise • Manufacturing

APT-ONE is a Berlin-based security consulting firm that combines AI-powered analysis with decades of security expertise to help organizations secure modern IT, cloud and industrial OT environments and safely integrate AI. The company offers services across Enterprise IT Security, Industrial/OT Security, Secure AI integration and AI-enhanced security operations (automated pentesting, autonomous incident response, SOC modernization), with a strong emphasis on regulatory compliance (NIS2, AI Act, IEC 62443) and risk-based, non-disruptive approaches for critical infrastructure and manufacturing clients.

📋 Description

• Conduct security audits and gap analyses according to ISO 27001, BSI IT-Grundschutz and NIS2 • Support companies in preparing for KRITIS audits and BSI evidence in accordance with §39 BSIG • Establish and further develop Information Security Management Systems (ISMS) • Advise on implementing NIS2 requirements: risk management, reporting obligations, supply chain security, and executive liability • Perform TISAX assessments for companies in the automotive supply chain • Produce risk assessments, security policies and evidence documentation • Advise on the interaction between NIS2, GDPR and industry-specific regulations (EnWG, TKG, DORA for the financial sector) • Advise on implementation of the EU AI Act: risk classification of AI systems, conformity assessments and documentation obligations • Support compliance with the Cyber Resilience Act (CRA) requirements for manufacturers and importers of digital products • Train executive management and senior leaders on their obligations under NIS2 (§38 BSIG)

🎯 Requirements

• Minimum 5 years of professional experience in IT security auditing, compliance or ISMS consulting • Certification as an ISO 27001 Lead Auditor or Lead Implementer (mandatory) • Solid knowledge of the BSI IT-Grundschutz compendium and BSI standards 200-1/200-2/200-3/200-4 • Demonstrable experience with KRITIS audits and/or NIS2 implementation projects • Knowledge of the EU AI Act (risk classification, high-risk AI systems) and the Cyber Resilience Act (CRA) is a strong plus • Knowledge of TISAX and VDA ISA is an additional advantage • Experience conducting risk assessments and developing security concepts • Understanding of the interplay between technical and organizational security measures • Business-fluent German (mandatory) and good English skills

🏖️ Benefits

• Base salary starting at €80,000 with profit-sharing of up to €70,000 • Flexible working hours and remote work • 30 days of vacation • IT equipment such as an Apple MacBook • Regular team events • Corporate benefits such as company pension scheme, company health insurance, shopping and employee discounts