Consulting Expert for KRITIS and NIS2 (m/f/d)

3-core GmbH; Bonn; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Hybrid working with fixed home office

30 days’ annual leave

Modern workplace

Flexible working hours

Team events

Unlimited coffee

Zusammenfassung

3-core GmbH is seeking an experienced Consulting Expert for KRITIS and NIS2 in Germany. You will advise clients in regulated settings, develop practical controls, and lead audit-ready projects in a hybrid work environment.

You will translate KRITIS and NIS2 requirements into actionable measures, drive risk assessments, and support certifications with a structured, process-oriented approach.

Qualifikationen

• Completed degree (e.g. (Business) Informatics/Computer Science, IT Security, Engineering) or equivalent professional experience.
• Experience in information security or security consulting, ideally in a regulated environment.
• Strong understanding of KRITIS and/or NIS2 with ability to translate requirements into auditable evidence.

Aufgaben

• Advising on KRITIS requirements and NIS2 compliance (interpretation, implementation, evidence/assurance, certifications).
• Conducting gap analyses and maturity assessments, and developing roadmaps and action plans.
• Building and further developing ISMS structures aligned with ISO/IEC 27001, including policies and documentation.
• Supporting risk assessments and Schutzbedarfsanalysen and prioritising security measures.
• Preparing audits, assessments and certifications, including management-ready reporting.
• Facilitating workshops with IT, security, business units and senior management.
• Owning client subject-matter support and ensuring on-time, high-quality project delivery.

Kenntnisse

KRITIS & NIS2 knowledge

MS Office skills

Languages EN/DE (C1)

Travel willingness

Ausbildung

Degree in IT/CS or related

Jobbeschreibung

Consulting Expert for KRITIS and NIS2 (m/f/d)

To strengthen our team, we are looking for a highly motivated Consulting Expert for KRITIS (critical infrastructure) and NIS2 who enjoys delivering demanding projects in a regulated environment.

Your Responsibilities as a Consulting Expert for KRITIS and NIS2

With your specialist expertise, you advise our clients either as part of a team or independently as a Consulting Expert for KRITIS and NIS2. You take a structured approach, simplify complexity, and develop practical, audit-ready solutions. You coordinate projects, produce analyses and decision papers, and present results in a way that suits the target audience. Your key responsibilities include:

• Advising on KRITIS requirements and NIS2 compliance (interpretation, implementation, evidence/assurance, certifications)
• Conducting gap analyses and maturity assessments, and developing roadmaps and action plans
• Building and further developing ISMS structures (e.g. aligned with ISO/IEC 27001), including policies, processes and documentation
• Supporting risk assessments, protection needs assessments (Schutzbedarfsanalysen) and prioritising appropriate security measures
• Preparing and supporting audits, assessments and certifications, including management-ready reporting
• Facilitating workshops with IT, security, business units and senior management
• Owning client subject-matter support and ensuring projects are delivered on time and to a high quality standard

You strengthen our team with your experience and qualifications

• Completed degree (e.g. (Business) Informatics/Computer Science, IT Security, Engineering, or similar) or an equivalent qualification gained through relevant professional experience
• Experience in information security and/or security consulting, ideally within a regulated environment
• Very strong understanding of KRITIS (critical infrastructure)and/or NIS2, including translating requirements into practical controls, workable processes, and auditable evidence/certification
• Efficient, structured, proactive, and highly detail-oriented working style
• Very good MS Office skills
• Very good German and English skills (C1 level)
• Willingness to travel approx. 20% (national/international)
• Nice to have: experience in BCM / emergency and crisis management in a KRITIS context
• Structured onboarding and continuous mentoring (personal and professional)
• Monthly team events
• Modern workplace and flexible working hours
• Hybrid working: one fixed home office day per week, with additional days by agreement
• Training and professional development tailored to your goals
• Short decision-making paths, plenty of scope to shape things, and a start-up mindset
• Challenging client projects, true teamwork, and regular customer contact
• Competitive salary, 30 days’ annual leave
• Healthy snacks and "brain food" in our team kitchen, plus unlimited coffee