Senior Manager ISMS Consulting, Audits

🕒 August 2

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IT-Security Coach GmbH [itsecuritycoach]

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2018

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

IT-Security Coach GmbH [itsecuritycoach] is a German cybersecurity consultancy and coaching firm that helps organizations implement, operate and certify information security and privacy programs. They offer ISMS/ISO 27001 implementation, penetration testing, incident-response planning, IT audits, TISAX® introduction, BSI IT-Grundschutz services, external data protection officer and privacy advisory, cybersecurity trainings, and AI/KI security and compliance services (including EU AI Act guidance). Itsecuritycoach serves banks, healthcare, public sector, IT service providers, industry and automotive suppliers and emphasizes pragmatic, audit-focused coaching and 24/7 emergency support.

📋 Description

• Lead consultancy projects in the area of Information Security Management Systems (ISMS) • Independent development, operation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, B3S, KRITIS, NIS-2 and/or TISAX • Conduct Cyber Risk Assessments • Design and deliver trainings, workshops and awareness measures • Prepare security analyses for IT and cyber projects • Prepare and perform reviews, audits and inspections – including ISMS, ISO 27001, NIS-2, KRITIS, DORA, BSI IT-Grundschutz and TISAX • Projects for information classification and determination of protection requirements • Develop concepts for prevention and mitigation of threats and attacks • Advise our clients on selection, implementation and operation of IT security solutions • Support client projects in the area of AI governance • Responsibility for your team, its workload and the budget – and shaping the consulting offering

🎯 Requirements

• A degree in (business) computer science, business administration or a comparable qualification – alternatively several years of relevant professional experience • Several years of consulting experience in information security while simultaneously managing five or more projects of varying maturity levels and objectives • Proven expertise in a specialist area such as AI governance, cloud security, SIEM, security testing, vulnerability management, incident/continuity management or identity & access management • Solid knowledge of standardized recommendations such as BSI IT-Grundschutz, ISO 2700x, B3S, NIS-2 or ISO 31000 • Ideally knowledge in areas such as AI Act, BCM, GDPR, NIS-2, KRITIS as well as other standards and frameworks (e.g. NIST, COBIT 2019, ISO 900x/2000x) • Proof of your skills through relevant certifications (e.g. IT-Grundschutz Consultant/Auditor, ISO 27001 Lead Auditor, CISSP, TISP, CISA, CISM) • Interest in new client acquisition and account management (cross-selling) in collaboration with our sales team

🏖️ Benefits

• Flexibility: We have no fixed on-site days. • Vacation: 30 days of vacation plus the possibility of workation within Europe • Preferred workplace: Office in Olpe (NRW) or mobile working – anywhere in Germany and Europe • Job security: This position is permanent • Benefits: Company supplementary health insurance and company car after the probationary period • Personal development: Individual onboarding aimed at independent project and client responsibility, qualification opportunities (in particular professional certifications according to an individual training plan) and career prospects for long-term collaboration – also in an international context • Direct communication: Flat hierarchies and short decision-making paths