For a global management holding company, operating independent business divisions across more than 30 countries and with 10 000 + FTE, we are searching for:

Information Security Officer (ISO) -Germany (fluent German is required)

Important! - Position is primarily based in northern Germany and can be in Hamburg, Lübeck, Kiel or similar. Candidates from that area or willing to relocate there, are preferred.

Reports to: Group CISO (Chief Information & Product Security Officer)

Requirements

Several years of experience in information security, ideally within a corporate or group environment
Strong knowledge of established security frameworks, such as ISO 27001 and CIS Controls
Familiarity with regulatory requirements such as NIS-2 and the Cyber Resilience Act (CRA)
Experience in establishing ISMS structures, conducting audits, performing risk assessments, and managing incident response
Ability to communicate and collaborate effectively with various stakeholders across a decentralized corporate structure
Structured, pragmatic, and solution-oriented approach, with the ability to independently drive new initiatives forward

Must-have skills

ISO 27001, CIS Controls, NIS-2
Experience: At least 2 years of professional experience in information security
Travel requirements: High willingness to travel within Germany, potentially increasing to approximately 75%

Tasks & Responsibilities

Build and continuously improve robust information security structures aligned with ISO 27001
Provide functional leadership and guidance to Information Security Managers across the assigned group companies
Conduct risk assessments, audits, and incident response activities, including maintaining and updating the risk register
Ensure compliance with regulatory requirements, including NIS-2, and meet the requirements of the company's cyber insurance provider
As a secondary responsibility, establish and develop product security structures in accordance with the Cyber Resilience Act (CRA) across the assigned companies
Establish information security structures within the holding company and address outstanding findings from the ISO 27001 audit
Take on the Information Security Officer (ISO) role for the PMB business area, establish appropriate security structures, and provide professional guidance and support to Information Security Managers across PMB companies

If you want a high-Impact Role, where you can play a key role in building and developing the ISMS, product security, and OT security frameworks, with significant freedom to shape processes and structures, we would be happy to hear from you.

Client can offer a strong career prospects, work directly with the Group CISO, gain visibility up to executive board level, and benefit from a clear succession opportunity towards the Group CISO/CPSO position

#J-18808-Ljbffr

Eligo Selekcija - Your recruitment partner in the EMEA region