Compliance & Information Security Manager

• Drive the development of compliance and information security management across the corporate group
• Manage and further develop the ISMS in accordance with ISO 27001 and support its company-wide rollout
• Conduct and document risk analyses and risk assessments
• Review existing technical and organizational security measures and develop appropriate measures in collaboration with IT
• Prepare for and support internal and external audits, and follow up on agreed measures
• Further develop policies, processes, and evidence relating to information security and compliance
• Assess suppliers and external service providers with regard to information security and compliance
• Support data protection requirements, particularly technical and organizational measures, data processing agreements, documentation, and training
• Support compliance with regulatory requirements, particularly NIS2, KRITIS, and TKG/BNetzA security requirements
• Support occupational health and safety initiatives
• Raise employee awareness and provide training on information security, data protection, and compliance
• Advise on and support IT and organizational projects at an early stage from a compliance and security perspective
• Collaborate with IT, business departments, senior management, and external data protection and information security experts

Requirements

• Professional experience in information security, ISO 27001, IT compliance, or IT risk management
• Strong knowledge of ISO/IEC 27001 and, ideally, practical experience with an ISMS
• Good technical understanding of IT infrastructures and IT security measures
• Experience conducting risk analyses and assessing technical and organizational measures
• Knowledge of data protection (GDPR) and occupational health and safety
• Knowledge of NIS2 or regulatory requirements in the telecommunications sector is an advantage
• Structured, independent, and solution-oriented approach to work
• Strong communication skills and the ability to bring technical and regulatory requirements together in an understandable and pragmatic manner

Core Competencies

Demonstrates expertise in Information Security Management Systems (ISMS) in accordance with ISO 27001, risk analysis, and compliance with regulatory requirements such as GDPR and NIS2. Capable of developing policies, conducting audits, and providing training to enhance organizational security and compliance.

Highest-signal resume keywords

• ISO 27001
• Information Security Management System (ISMS)
• Risk Analysis
• Data Protection (GDPR)
• NIS2 Compliance

ATS Optimization Keywords

Hard Skills

• Information Security
• IT Compliance
• IT Risk Management
• Technical Security Measures
• Organizational Security Measures
• Risk Assessment
• Policy Development
• Audit Preparation
• Supplier Assessment
• Occupational Health and Safety

Soft Skills

• Strong Communication Skills
• Solution-Oriented Approach
• Independent Work
• Collaboration

Industry Keywords

• ISO/IEC 27001
• GDPR
• NIS2
• KRITIS
• TKG/BNetzA