The Information Security Officer role involves implementing and maintaining ISO 27001 and TISAX certifications, ensuring adherence to regulatory and contractual security requirements, and leading security incident response. The role requires a strong understanding of risk management, threat modelling, and vulnerability management, as well as experience with penetration testing tools and methodologies.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, or a related field.
- 4 – 6 years work experience in information security, compliance, or IT governance.
- Hands-on experience with ISO 27001 implementation and audits.
- Experience with penetration testing tools and methodologies.
- Knowledge of infrastructure hardening and application security best practices.
- Deep understanding of regulatory frameworks and audit processes.
- Experience maintaining compliance documentation and evidence.
- Excellent problem-solving and analytical skills.
- Strong verbal and written communication skills in English, German is a plus.
Benefits
- Hybrid working model
- 30 vacation days per year
- Above-average pay including a bonus scheme
- Annual personal development budget
- Corporate benefits
- Attractive company pension scheme
- Regular team events