Information Security Manager (m/w/d)
Core
Lead the ISMS (ISO/IEC 27001) for a large German logistics and food distribution group, ensuring compliance with NIS2, GDPR, and KRITIS regulations.
Role type
Senior Information Security Manager (GRC & Compliance)
Builds
Information security governance, risk management processes, and compliance frameworks for a multi-site logistics and food retail organization.
Domain
Logistics, Food Distribution, Retail
Required skills
ISO/IEC 27001, NIS2 Directive, GDPR, KRITIS, Risk Management, Audit Management, GRC Processes
Preferred skills
Stakeholder Advisory, Security Awareness Campaigns, Process Improvement
Technologies
GRC Tools, Audit Platforms
Responsibilities
Steer and continuously improve the ISMS according to ISO/IEC 27001; Monitor and ensure regulatory compliance (NIS2, GDPR, KRITIS); Conduct and develop information security and risk management; Create management reports, policies, and security concepts; Advise business units and management on security and compliance; Coordinate and track security measures; Support awareness campaigns and training; Collaborate with internal and external stakeholders, auditors, and service providers.
Seniority
Senior, hands-on IC