Information Security Consultant

• Maintain and continuously update all ISMS policies
• Integrate new regulatory requirements
• Advise business departments on process design in compliance with applicable standards
• Independently plan and conduct audits
• Prepare detailed audit reports
• Prepare audit findings for the annual management review
• Define and monitor corrective actions
• Continuously optimize the GRC system
• Contribute to the development of the Internal Control System (ICS)
• Plan training activities strategically
• Provide administrative and content-related support for the security awareness platform
• Analyze key performance indicators statistically
• Capture and map department-specific processes in the GRC system
• Support Risk Owners in conducting systematic risk analyses
• Collaborate with business departments and the CISO to strengthen information security and further develop the security culture

Requirements

• Completed university degree, for example in IT security, computer science, or business informatics
• Alternatively, an equivalent qualification combined with several years of professional experience
• Experience developing and maintaining an ISMS in accordance with ISO/IEC 27001
• Relevant certifications are a plus
• Experience independently planning and conducting audits
• Experience with risk assessments
• Experience tracking corrective actions
• Practical experience with GRC systems
• Practical experience with security awareness platforms
• Very good German and English skills
• Team-oriented, pragmatic, structured, communicative, and self-motivated approach to work

Core Competencies

Demonstrates expertise in maintaining ISMS policies and integrating regulatory requirements, with a strong focus on conducting audits and optimizing GRC systems. Proficient in risk assessment and security awareness training, complemented by excellent communication skills in both German and English.

Highest-signal resume keywords

• ISMS Development and Maintenance
• ISO/IEC 27001 Compliance
• Audit Planning and Execution
• GRC System Optimization
• Risk Assessment Experience

Hard Skills

• ISMS Policies
• Audit Reporting
• Corrective Action Tracking
• Risk Analysis
• Process Design Compliance

Soft Skills

• Team-Oriented
• Pragmatic
• Structured
• Communicative
• Self-Motivated

Certifications & Qualifications

• Relevant Certifications

Industry Keywords

• Internal Control System
• Key Performance Indicators
• Regulatory Requirements
• Information Security
• Security Culture

Tools & Technologies

• GRC Systems
• Security Awareness Platforms