Senior ISMS & Compliance Lead

fiskaly GmbH; Wien; Hybrid; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

fiskaly GmbH is seeking an Information Security & Compliance Manager to own our ISMS end-to-end, including closing audit findings and guiding re-certification. You will mature security processes, lead internal audits, and work hands-on with Engineering, Product and Legal to ensure controls work in a cloud-native SaaS environment.

The role involves coordinating with auditors, defining processes for business continuity, change management, incident and vulnerability management, and engaging across

Qualifikationen

• 5+ years in Information Security, Compliance or Risk Management.
• Owned at least one ISO 27001 certification, surveillance or re-certification audit end-to-end.
• Deep knowledge of ISO 27001 (2022) and its controls; knowledge of ISO 9001 and GDPR.
• Experience with GCP/Azure and cloud-native architectures.

Aufgaben

• Own ISMS end-to-end — scope, policies, controls, risk register, management review.
• Lead re-certification in early 2027: assess current state, close nonconformities, plan and run internal audits.
• Embed security-by-design into SDLC, CI/CD and IaC; move evidence collection to automated monitoring.
• Run company-wide risk management and translate risk into actionable tasks for leadership.
• Partner with Management to report state of security and provide direction for improvements.
• Support Legal and Sales on security questionnaires and customer audits.
• Oversee vendor risk management with scalable assessments.
• Maintain ISO 9001 QMS and GDPR framework; monitor NIS2 and AI Act.

Kenntnisse

ISO 27001

ISMS

Cloud / SaaS (GCP/Azure)

Risk management

Audits

Tools

CI/CD

Infrastructure as Code (IaC)

Jobbeschreibung

fiskaly GmbH is seeking an Information Security & Compliance Manager to own our ISMS end-to-end, including closing audit findings and guiding re-certification. You will mature security processes, lead internal audits, and work hands-on with Engineering, Product and Legal to ensure controls work in a cloud-native SaaS environment.

The role involves coordinating with auditors, defining processes for business continuity, change management, incident and vulnerability management, and engaging across