Information Security Manager

About the role

You will own the whole information security management system for a software firm whose e-commerce products clients rely on. The aim is to show that security processes exist and keep improving.

What you will do

• Get the organisation ready for certification, surveillance and recertification audits and defend it during them
• Plan and carry out the internal audit programme, write actionable findings and push them to closure
• Own the policy and standard framework, from writing and review through approval and versioning
• Run the cyber risk register, including assessments, treatment plans and acceptance decisions
• Handle customer security questionnaires, vendor assessments and the security awareness programme

What they look for

• Be technically literate enough to judge whether control evidence from an engineer proves the control
• Be fluent in English, both written and spoken

Benefits

• Remote-first work within Germany, with up to 180 days per year from eligible countries
• Meal allowance of up to EUR 115 net each month
• Allowance for an ergonomic home office setup
• Team events, company gatherings and summer and Christmas parties
• Fitness pass and bike subsidy, plus capital-forming payments and a company pension