Compliance & Information Security Manager (m/w/d)
Core
Develop and maintain the group's Compliance and Information Security Management, focusing on ISO 27001 ISMS, risk management, and technical/organizational security measures.
Role type
Senior IC Compliance & Information Security Manager
Builds
Enterprise-wide ISMS, security policies, and compliance frameworks
Domain
Telecommunications / IT Security / Regulatory Compliance
Required skills
ISO 27001 ISMS management, IT risk assessment, technical security measure evaluation, regulatory compliance (NIS2, TKG, KRITIS), data protection (GDPR), supplier security assessment
Preferred skills
NIS2 regulation knowledge, KRITIS requirements, AI Act awareness, work safety regulations
Technologies
ISO 27001, BNetzA Security Catalog, GDPR, NIS2, TKG, KRITIS
Responsibilities
Develop and document risk analyses and risk assessments, prepare and accompany internal and external audits, evaluate suppliers regarding information security and compliance, support data protection requirements including technical measures and documentation, raise awareness and train employees on security and compliance, consult on IT and organizational projects from a compliance and security perspective
Seniority
Senior, hands-on IC