Information Security Consultant (m/w/d)
Core
Develop and maintain the Information Security Management System (ISMS) per ISO/IEC 27001, manage third-party audits, and implement regulatory security standards.
Role type
Information Security Consultant (GRC & Compliance)
Builds
ISMS policies, audit reports, corrective action plans, and security awareness programs
Domain
Information Security / Governance, Risk, and Compliance (GRC)
Required skills
ISO/IEC 27001 ISMS development, third-party audit management, risk assessment, GRC system administration, security awareness training, regulatory compliance, process improvement
Preferred skills
ISO/IEC 27001 certification, experience with GRC tools, experience with awareness platforms
Technologies
GRC systems, Awareness platforms
Responsibilities
Update ISMS policies and integrate new regulations, plan and execute third-party audits, define and track corrective measures, manage security awareness training programs, perform risk analysis and map processes in the GRC system
Seniority
Mid-Senior, hands-on IC