Senior IT Security Consultant – ISMS, ISO 27001, BSI IT-Grundschutz, Audit

Responsibilities

• Establishing, implementing, and further developing ISMS based on ISO 27001 and BSI IT-Grundschutz
• Planning, conducting, and following up on internal audits, and supporting external audits and certifications (e.g., ISO 27001)
• Performing protection-needs assessments and risk analyses
• Developing policies, processes, and security concepts
• Conducting gap analyses and maturity assessments
• Advising management and departments on compliance, information security, and incident management
• Supporting the selection, implementation, and operation of security solutions (e.g., SIEM, IAM, firewalls, endpoint security)

Requirements

• Degree in Computer Science, IT Security, Business Informatics, or a related field
• Several years of experience in the ISMS environment, ideally in consulting or in security-critical industries
• Practical experience with ISO 27001 and/or BSI IT-Grundschutz
• Experience in auditing or supporting certifications is a plus
• Ideally certified (ISO 27001 Lead Auditor/Implementer, CISSP, CISM, etc.)
• Analytical thinking, structured working style, strong communication skills, and a confident demeanor with clients
• German language skills at C1/C2 level

Core Competencies

Demonstrates expertise in establishing and implementing Information Security Management Systems (ISMS) based on ISO 27001 and BSI IT-Grundschutz, with strong capabilities in conducting audits, risk analyses, and developing security policies. Proficient in advising on compliance and incident management while supporting the implementation of security solutions.