Information Security Manager (w/m/d)
Core
End-to-end ownership of the ISO/IEC 27001:2022 ISMS, internal audit program, policy framework, cyber risk register, and security awareness for an e-commerce software company.
Role type
Senior IC Information Security Manager
Builds
Security management system, audit programs, policy frameworks, risk registers, and training programs
Domain
Cybersecurity / Information Security Management
Required skills
ISO/IEC 27001:2022 ISMS ownership and defense, internal audit planning and execution, policy and standard framework authorship, cyber risk register management, security awareness program design, technical literacy for control evidence verification
Responsibilities
Run and maintain the ISO/IEC 27001:27001:2022 management system including scope, SoA, and control ownership; Plan and run the internal audit programme and drive findings to closure; Own the policy and standard framework lifecycle; Run the cyber risk register with assessment and treatment plans; Act as single point of contact for customer security assessments and manage third-party vendor security assessments; Design and run the security awareness programme and measure its effectiveness
Seniority
Senior, hands-on IC