- Maintain and continuously update all ISMS policies
- Integrate new regulatory requirements
- Advise business departments on process design in compliance with applicable standards
- Independently plan and conduct audits
- Prepare detailed audit reports
- Prepare audit findings for the annual management review
- Define and monitor corrective actions
- Continuously optimize the GRC system
- Contribute to the development of the Internal Control System (ICS)
- Plan training activities strategically
- Provide administrative and content-related support for the security awareness platform
- Analyze key performance indicators statistically
- Capture and map department-specific processes in the GRC system
- Support Risk Owners in conducting systematic risk analyses
- Collaborate with business departments and the CISO to strengthen information security and further develop the security culture
Requirements
- Completed university degree, for example in IT security, computer science, or business informatics
- Alternatively, an equivalent qualification combined with several years of professional experience
- Experience developing and maintaining an ISMS in accordance with ISO/IEC 27001
- Relevant certifications are a plus
- Experience independently planning and conducting audits
- Experience with risk assessments
- Experience tracking corrective actions
- Practical experience with GRC systems
- Practical experience with security awareness platforms
- Very good German and English skills
- Team-oriented, pragmatic, structured, communicative, and self-motivated approach to work
Core Competencies
Demonstrates expertise in maintaining ISMS policies and integrating regulatory requirements, with a strong focus on conducting audits and optimizing GRC systems. Proficient in risk assessment and security awareness training, complemented by excellent communication skills in both German and English.
Highest-signal resume keywords
- ISMS Development and Maintenance
- ISO/IEC 27001 Compliance
- Audit Planning and Execution
- GRC System Optimization
- Risk Assessment Experience
Hard Skills
- ISMS Policies
- Audit Reporting
- Corrective Action Tracking
- Risk Analysis
- Process Design Compliance
Soft Skills
- Team-Oriented
- Pragmatic
- Structured
- Communicative
- Self-Motivated
Certifications & Qualifications
- Relevant Certifications
Industry Keywords
- Internal Control System
- Key Performance Indicators
- Regulatory Requirements
- Information Security
- Security Culture
Tools & Technologies
- GRC Systems
- Security Awareness Platforms
#J-18808-Ljbffr
Information Security Consultant Arbeitgeber: Jobtailor
Als Front Office Supervisor in unserem dynamischen Team bieten wir Ihnen die Möglichkeit, in einem unterstützenden und freundlichen Arbeitsumfeld zu wachsen. Wir legen großen Wert auf die berufliche Entwicklung unserer Mitarbeiter und bieten regelmäßige Schulungen sowie die Chance, Verantwortung zu übernehmen. Unsere Lage ermöglicht es Ihnen, Teil einer lebendigen Gemeinschaft zu sein, während Sie gleichzeitig die Standards unseres Franchise-Partners einhalten und unseren Gästen einen unvergesslichen Aufenthalt bieten.
