Senior Consultant, ISMS Auditor

Job not on LinkedIn

🕒 May 7

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IT-Security Coach GmbH [itsecuritycoach]

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2018

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

IT-Security Coach GmbH [itsecuritycoach] is a German cybersecurity consultancy and coaching firm that helps organizations implement, operate and certify information security and privacy programs. They offer ISMS/ISO 27001 implementation, penetration testing, incident-response planning, IT audits, TISAX® introduction, BSI IT-Grundschutz services, external data protection officer and privacy advisory, cybersecurity trainings, and AI/KI security and compliance services (including EU AI Act guidance). Itsecuritycoach serves banks, healthcare, public sector, IT service providers, industry and automotive suppliers and emphasizes pragmatic, audit-focused coaching and 24/7 emergency support.

📋 Description

• Development and enhancement of Information Security Management Systems (ISMS) • Design and maintenance of ISMS according to ISO 27001, BSI IT-Grundschutz, or TISAX • Support and conduct security audits and reviews • Conduct cyber risk assessments • Design and deliver trainings, workshops, and awareness initiatives • Prepare security analyses for IT and cyber projects • Prepare and perform assessments, audits, and reviews, including ISMS, NIS2, KRITIS, DORA, and BSI IT-Grundschutz • Information classification and determination of protection requirements • Develop concepts for prevention and defense against threats and attacks • Advise clients on the selection, implementation, and operation of IT security solutions

🎯 Requirements

• Degree in (Business) Computer Science, Business Administration, or equivalent qualification, or several years of relevant professional experience • Solid professional and project experience in the areas of cyber security, information security, and incident/emergency management • Overview and knowledge in at least one area such as Cloud Security, SIEM, security testing, vulnerability management, incident management, or Identity & Access Management • Knowledge of standardized frameworks and recommendations such as BSI IT-Grundschutz, ISO 2700x, B3S, ISO 31000, etc. • Familiarity with BCM, GDPR, NIS2, KRITIS and other standards (NIST, COBIT 2019, ISO 9000/20000 series) is advantageous • Ideally: proof of knowledge through relevant certifications (e.g., IT-Grundschutz Practitioner/Consultant/Auditor, ISO 27001 Auditor, ISO/CISO, CISSP, TISP, CISA, CISM, CSP, ISP, etc.) • Excellent German and English skills, both written and spoken.

🏖️ Benefits

• 30 days of annual leave and the option for workation • Flexibility: above-average work-life balance through flexible working models (50–100% employment) • Company supplemental health insurance • Individual onboarding, training opportunities (especially certification paths according to a personalized development plan) and career prospects for long-term collaboration, including in an international context • Flat hierarchies