Information Security Officer (ISO) -Germany

For a global management holding company, operating independent business divisions across more than 30 countries and with 10 000 + FTE, we are searching for:

Information Security Officer (ISO) -Germany (fluent German is required)

Important! - Position is primarily based in northern Germany and can be in Hamburg, Lübeck, Kiel or similar. Candidates from that area or willing to relocate there, are preferred.

Reports to: Group CISO (Chief Information & Product Security Officer)

Requirements

• Several years of experience in information security, ideally within a corporate or group environment
• Strong knowledge of established security frameworks, such as ISO 27001 and CIS Controls
• Familiarity with regulatory requirements such as NIS-2 and the Cyber Resilience Act (CRA)
• Experience in establishing ISMS structures, conducting audits, performing risk assessments, and managing incident response
• Ability to communicate and collaborate effectively with various stakeholders across a decentralized corporate structure
• Structured, pragmatic, and solution-oriented approach, with the ability to independently drive new initiatives forward

Must-have skills

• ISO 27001, CIS Controls, NIS-2
• Experience: At least 2 years of professional experience in information security
• Travel requirements: High willingness to travel within Germany, potentially increasing to approximately 75%

Tasks & Responsibilities

• Build and continuously improve robust information security structures aligned with ISO 27001
• Provide functional leadership and guidance to Information Security Managers across the assigned group companies
• Conduct risk assessments, audits, and incident response activities, including maintaining and updating the risk register
• Ensure compliance with regulatory requirements, including NIS-2, and meet the requirements of the company's cyber insurance provider
• As a secondary responsibility, establish and develop product security structures in accordance with the Cyber Resilience Act (CRA) across the assigned companies
• Establish information security structures within the holding company and address outstanding findings from the ISO 27001 audit
• Take on the Information Security Officer (ISO) role for the PMB business area, establish appropriate security structures, and provide professional guidance and support to Information Security Managers across PMB companies

If you want a high-Impact Role, where you can play a key role in building and developing the ISMS, product security, and OT security frameworks, with significant freedom to shape processes and structures, we would be happy to hear from you.

Client can offer a strong career prospects, work directly with the Group CISO, gain visibility up to executive board level, and benefit from a clear succession opportunity towards the Group CISO/CPSO position

#J-18808-Ljbffr