Information Security, Compliance & Internal Controls Manager – ISO 27001

Job Description:

• Build, further develop, and systematically prepare the organization for an ISO/IEC 27001-compliant Information Security Management System (ISMS), as well as for ISO 9001 certification
• Analyze, assess, and implement regulatory requirements, particularly those arising from the NIS2 Directive
• Align with and, where applicable, implement measures based on the BSI IT-Grundschutz standard
• Establish, further develop, and ensure the annual audit of the Internal Control System (IKS) by the external auditor in accordance with PS 951 Type 2 / ISAE 3402
• Maintain and structure compliance and security documentation in Confluence and Jira, including audit-ready structures and workflows
• Work continuously with and advise all teams on the systematic collection and updating of security- and compliance-related information
• Develop, standardize, and optimize processes in information security, compliance, and internal controls
• Prepare for, coordinate, and support internal and external audits, including risk analyses and action-item tracking

Requirements:

• 3–6 years of professional experience in information security, IT compliance, or ISMS
• Practical experience with ISO/IEC 27001, including implementation, operation, or auditing
• Strong knowledge of regulatory requirements, such as the NIS2 Directive, GDPR, and IT security requirements
• Experience establishing and maintaining structured documentation and processes
• Knowledge of BSI IT-Grundschutz and/or quality management in accordance with ISO 9001 is a plus
• Experience conducting internal audits or supporting certification processes is advantageous
• Basic technical understanding of cloud and IT architectures
• Proficiency with Confluence and Jira or comparable tools is a plus
• Ability to communicate complex requirements clearly and implement them pragmatically
• Fluency in German and good command of English

Benefits:

• 100% remote position with a high degree of scheduling flexibility
• Competitive salary
• Automatic KPI-based salary increases
• Attractive annual bonuses
• 30+ days of paid annual leave
• Fully equipped premium home office setup
• Company (e-)bike
• Supplementary company health insurance
• Additional corporate benefits
• Work in an international environment at one of the world’s leading cloud providers in the SAP ecosystem
• Permanent employment contract