Compliance Manager (m/w/d) – Informationssicherheit & Datenschutz
Core
Operate and develop the certified ISMS, lead internal audits, and execute the compliance roadmap for NIS2, Cyber Resilience Act, GDPR, and EU AI Act within a remote-access software company.
Role type
Senior Compliance Manager (Information Security & Data Protection)
Builds
Stable ISMS operations and regulatory compliance for a SaaS/remote-access software product
Domain
Cybersecurity, Data Privacy, Regulatory Compliance (NIS2, CRA, GDPR, AI Act)
Required skills
ISO 27001 management, internal audit planning and execution, GDPR compliance, regulatory impact assessment, data protection impact assessments (DPIA), transfer impact assessments, risk assessment, process documentation, stakeholder collaboration, automation of compliance tasks
Preferred skills
ISO 27001 auditor certification, experience in software or SaaS industry, NIS2 and Cyber Resilience Act expertise, EU AI Act knowledge, technical understanding of cloud infrastructure and APIs
Technologies
ISO 27001, GDPR, NIS2, Cyber Resilience Act, EU AI Act, Cloud Infrastructure, APIs, SaaS, AI tools
Responsibilities
Develop and maintain the certified ISMS per ISO 27001; plan and lead internal audits; execute the compliance roadmap for NIS2 and CRA; monitor regulatory developments and derive measures; conduct data protection and security assessments for new tools and services; prepare DPIAs and TIAs; handle customer data protection and security inquiries; create and maintain compliance documentation and policies; prepare monthly status reports for management; design and support internal training and awareness programs; continuously optimize compliance processes using automation and AI
Seniority
Senior, hands-on IC
