Information Security Manager (f/m/d) - Senior

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2,300 employees, PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply, production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.

We are looking for an Information Security Manager (f/m/d)

Tasks inspiring you

• Be the driving force behind PSI's information security management - shape, improve and future-proof it across a wide range of topics
• Take ownership of our Information Security Management System (ISMS) and make it both sustainable and effective
• Bring structure and clarity to governance: design and refine policies, processes, make information security an enabler - not a blocker
• Support security reviews, assessments, and reporting - turning insights into action
• Elevate our risk management: identify, assess and continuously improve how we handle security risks across PSI
• Collaborate across all business units and levels - from engineers to leadership - and help everyone speak the language of security
• Get involved in due diligence activities (vendor, product, or internal assessments) and ensure we partner securely
• Play a key role in audit preparation as well as execution (ISO 27001, TISAX, and more) and ensure PSI is always audit-ready
• Strengthen our security and compliance culture, and drive knowledge sharing within the team and across the organization
• Support incident management with a calm mind and sharp focus when it matters most

Qualifications that inspire us

• Solid know-how in Information Security Management and frameworks (ISO 27001, NIST, etc.)
• Strong understanding of business and organizational processes, ideally within the software industry
• Proven experience in information security governance - you know how to create, refine, and implement policies and controls that actually work
• Strategic mindset - you see the big picture and ensure long-term sustainability
• Experience in risk management and a keen sense for prioritization
• Good grasp of cloud security (especially GCP and Office 365)
• Analytical thinker and thought leader - you don't just follow best practices, you help define them
• Ownership mentality - you take full responsibility from concept to completion
• Understanding of lean and agile principles - and how they empower secure development
• Excellent communication skills - clear, precise, and confident across all audiences
• Commitment to operational excellence and continuous improvement
• Fluent in English, German (at least B2) preferred
• Most importantly: a genuine passion for information security, curiosity, and a love for continuous learning

Nice-to-have

• Certifications such as CISM, ISO 27001 Lead Auditor, CIPM, CIPP/E, GCP Cloud Engineer/Security, MS365 Security, etc.
• Experience with Terraform or other infrastructure-as-code tools