ISMS & Assurance Manager
Core
Own the ISMS framework, hold evidence, and ensure compliance with ISO 27001, NIS2, and the Cyber Resilience Act across a multi-entity European organization.
Role type
Senior ISMS & Assurance Manager
Builds
A unified management system and compliance evidence base for ISO 27001, NIS2, and Cyber Resilience Act
Domain
Cybersecurity / Information Security Management Systems
Required skills
ISO 27001 management system operation, internal auditing, risk register management, supplier security risk assessment, ISAE 3402 reporting, NIS2 knowledge, root cause analysis, process improvement coaching
Preferred skills
Experience with acquired company integration, customer security assurance, multi-entity/cross-country compliance
Technologies
ISO 27001, NIS2, Cyber Resilience Act, ISAE 3402
Responsibilities
Drive policy review cycles and maintain governing documents, own compliance evidence base and control monitoring, translate requirements into ways of working, map overlapping requirements into a single control set, coach through nonconformities, run internal audits and process sampling, coordinate external audits and certification, bring acquired companies into the ISMS, own customer security assurance, operate the risk register and perform supplier security risk assessments
Seniority
Senior, hands-on IC