Information Security & Compliance Officer (f/m/d)
Core
Own and grow SPREAD's information security and compliance program (ISO 27001, SOC 2, TISAX) while managing IT operations and end-user support.
Role type
Senior Information Security & Compliance Officer (hands-on IC)
Builds
Audit-ready security programs and compliant IT infrastructure for automotive OEMs and defense primes
Domain
Cybersecurity, Compliance, IT Operations
Required skills
ISO 27001 audit support, SOC 2 audit support, TISAX familiarity, Identity and Access Management (Entra ID), M365/Exchange Online administration, Mac endpoint management, End-user IT support, Joiner-mover-leaver process management, Security awareness training, Phishing simulation management, Risk register maintenance, Vendor security assessments, Automation scripting
Preferred skills
TISAX ecosystem exposure, Vanta platform experience, Automation/Scripting skills
Technologies
ISO 27001, SOC 2, TISAX, Entra ID, M365, Exchange Online, Vanta
Responsibilities
Support ISO 27001, SOC 2 Type II, and TISAX audit cycles end-to-end; Answer customer and OEM security questionnaires; Present ISMS status and audit results to leadership; Maintain risk register, policies, and vendor security assessments; Run security awareness training and phishing simulations; Administer identity and access (provisioning, access reviews, conditional access, RBAC); Manage device and endpoint lifecycle; Own end-user IT support and joiner-mover-leaver process; Automate repetitive IT and evidence-collection work
Seniority
Senior, hands-on IC
