Auditor/Consultant Informationssicherheit/ISMS - ISO/IEC 27001 (m/w/d)
Core
Consultant and auditor specializing in Information Security Management Systems (ISMS), guiding clients through implementation, development, and certification of security frameworks.
Role type
Senior IC Information Security Consultant / Auditor
Builds
ISO/IEC 27001 compliant ISMS, security policies, risk mitigation measures, and audit documentation
Domain
Cybersecurity / Compliance / Risk Management
Required skills
ISO/IEC 27001 auditing, risk assessment, security policy development, IT infrastructure analysis, security awareness training, regulatory compliance, stakeholder consulting, technical documentation, project management, security gap analysis
Preferred skills
BSI IT-Grundschutz, TISAX, ISO 27001 implementation, security architecture design, change management, crisis communication, security culture building, advanced threat modeling, security operations monitoring
Technologies
ISO/IEC 27001, BSI IT-Grundschutz, TISAX, GRC platforms, SIEM tools, vulnerability scanners, risk assessment frameworks, security policy templates, audit management software
Responsibilities
Conduct internal and external audits for ISO/IEC 27001 compliance, develop and implement security policies and procedures, perform risk assessments and identify security gaps, deliver security awareness training to clients, prepare clients for certification audits, create security concept documents and action plans, analyze IT infrastructure for security vulnerabilities, provide strategic consulting on information security management
Seniority
Senior, hands-on IC