Information Security Consultant

Darum lohnt es sich

• Maintain and continuously update all ISMS policies • Integrate new regulatory requirements • Advise business departments on process design in compliance with applicable standards • Independently plan and conduct audits • Prepare detailed audit reports • Prepare audit findings for the annual management review • Define and monitor corrective actions • Continuously optimize the GRC system • Contribute to the development of the Internal Control System (ICS) • Plan training activities strategically • Provide administrative and content-related support for the security awareness platform • Analyze key performance indicators statistically • Capture and map department-specific processes in the GRC system • Support Risk Owners in conducting systematic risk analyses • Collaborate with business departments and the CISO to strengthen information security and further develop the security culture Requirements • Completed university degree, for example in IT security, computer science, or business informatics • Alternatively, an equivalent qualification combined with several years of professional experience • Experience developing and maintaining an ISMS in accordance with ISO/IEC 27001 • Relevant certifications are a plus • Experience independently planning and conducting audits • Experience with risk assessments • Experience tracking corrective actions • Practical experience with GRC systems • Practical experience with security awareness platforms • Very good German and English skills • Team-oriented, pragmatic, structured, communicative, and self-motivated approach to work Core Competencies Demonstrates expertise in maintaining ISMS policies and integrating regulatory requirements, with a strong focus on conducting audits and optimizing GRC systems.

Highest-signal resume keywords • ISMS Development and Maintenance • ISO/IEC 27001 Compliance • Audit Planning and Execution • GRC System Optimization • Risk Assessment Experience Hard Skills • ISMS Policies • Audit Reporting • Corrective Action Tracking • Risk Analysis • Process Design Compliance Soft Skills • Team-Oriented • Pragmatic • Structured • Communicative • Self-Motivated Certifications & Qualifications • Relevant Certifications Industry Keywords • Internal Control System • Key Performance Indicators • Regulatory Requirements • Information Security • Security Culture Tools & Technologies • GRC Systems • Security Awareness Platforms Proficient in risk assessment and security awareness training, complemented by excellent communication skills in both German and English.