Information Security Officer (f/m/d)
Core
Own the end-to-end information security and compliance program, managing audit cycles, risk registers, and security requirements for an AI-native engineering intelligence platform serving automotive and defense clients.
Role type
Senior Information Security Officer (GRC)
Builds
A mature ISO 27001, SOC 2, and TISAX compliant security posture for engineering intelligence products.
Domain
Cybersecurity / GRC / Automotive & Defense
Deliverable
production ML models
Required skills
ISO 27001 audit management, SOC 2 compliance, TISAX ecosystem knowledge, risk register management, security policy development, vendor security assessments, security awareness training design, identity and endpoint management requirements, automation of compliance workflows.
Preferred skills
German Ü2 security clearance eligibility, scripting/automation skills, Vanta platform experience.
Technologies
ISO 27001, SOC 2, TISAX, Vanta, M365, Ü2 clearance
Responsibilities
Lead ISO 27001, SOC 2, and TISAX audit cycles; answer customer security questionnaires; present ISMS status and risk posture to leadership; maintain risk registers and security policies; run security awareness training and phishing simulations; define security requirements for identity and device management; automate compliance evidence collection.
Seniority
Mid-Senior, hands-on IC