Senior ISMS & Risk Consultant - ISO 27001/TISAX

SEC Consult (Schweiz) AG; Wien; On-site; EUR 44,000 - 50,000; Full time

Job summary

SEC Consult is seeking an experienced Information Security Management Consultant (f/m/d) to lead ISMS initiatives with a focus on ISO/IEC 27001 or TISAX. You will build and improve risk management processes, governance structures and security policies while guiding clients through audits and compliance requirements.

You will work with a team of international security experts, contribute to strategic information security programs, and support tender processes.

Qualifications

• Very good knowledge of ISO/IEC 27001 and ISO/IEC 27005.
• Strong governance, risk and compliance skills.
• Excellent communication and advisory competence.
• Very good German and English (spoken and written).
• Willingness to travel.
• At least 4 years of relevant professional experience in management consulting.
• Relevant certifications are advantageous (Lead Implementer/Auditor, TISAX).
• Knowledge in system and application security, data protection and software development is beneficial.

Responsibilities

• Introduce and improve ISMS with focus on ISO/IEC 27001 or TISAX.
• Establish information security risk management per ISO/IEC 27005.
• Carry out risk assessments and support risk treatment.
• Implement organizational security audits and assessments.
• Develop and optimize security policies and documents.
• Manage projects for information security improvements (ISO 27001 / TISAX).
• Determine compliance requirements for information security.
• Establish governance for information security and process organization.
• Support sales with information security during offers and tenders.

Skills

ISO/IEC 27001

ISO/IEC 27005

Security governance

Risk & compliance

Communication

German & English languages

Travel willingness

4+ years consulting experience

Education

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

TISAX Foundation Training

Job description

SEC Consult is seeking an experienced Information Security Management Consultant (f/m/d) to lead ISMS initiatives with a focus on ISO/IEC 27001 or TISAX. You will build and improve risk management processes, governance structures and security policies while guiding clients through audits and compliance requirements.

You will work with a team of international security experts, contribute to strategic information security programs, and support tender processes.