Information Security Engineer

THRYVE; Deutschland; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

THRYVE is seeking an Information Security Specialist focused on ISMS and AI governance. This 100% remote role within Germany offers ownership over security, resilience and governance in a highly regulated environment, working closely with engineering teams to translate complex security requirements into practical measures.

You will build the ISMS in line with ISO 27001, shape security strategy, manage ICT and AI risk, implement DORA and CRA, develop incident response, embed security into SDLC,

Qualifikationen

• Experience in information security, IT risk or IT compliance.
• Knowledge of ISO 27001, BSI IT-Grundschutz or NIST.
• Technical understanding of software-development environments.
• Experience with DORA, CRA, BCM or financial-sector regulation.
• Pragmatic, proactive approach to protect the business.

Aufgaben

• Build and develop the ISMS in line with ISO 27001.
• Shape security strategy, governance and Business Continuity Management.
• Own ICT, information-security and AI risk management.
• Implement requirements including DORA and the CRA.
• Develop incident-response processes and support real incidents.
• Embed security into software-development processes.
• Prepare audits and drive resulting actions through to completion.
• Help define the company’s approach to secure and responsible AI.

Kenntnisse

Information security

IT risk

IT compliance

ISO 27001

NIST

BSI IT-Grundschutz

DORA/CRA/BCM

AI governance security

Jobbeschreibung

Information Security Specialist – ISMS & AI Governance | 100% remote within Germany | Full-time

Want to build an ISMS—not simply maintain one?

Join an established German software and AI company whose technology supports major organisations across the Sparkassen ecosystem. You’ll have real ownership over information security, resilience and AI governance within a highly regulated environment.

This is a hands‑on role where you’ll work directly with engineering teams and turn complex security requirements into measures that genuinely work.

Your impact

• Build and develop the ISMS in line with ISO 27001
• Shape security strategy, governance and Business Continuity Management
• Own ICT, information‑security and AI risk management
• Implement requirements including DORA and the CRA
• Develop incident‑response processes and support real incidents
• Embed security into software‑development processes
• Prepare audits and drive resulting actions through to completion
• Help define the company’s approach to secure and responsible AI

What you’ll bring

• Experience in information security, IT risk or IT compliance
• Knowledge of ISO 27001, BSI IT‑Grundschutz or NIST
• Technical understanding of software‑development environments
• Ideally, experience with DORA, CRA, BCM or financial‑sector regulation
• A pragmatic, proactive approach—you can protect the business without unnecessarily slowing it down

Why consider it?

• Genuine ownership rather than a purely advisory security role
• Direct influence over engineering, governance and business decisions
• Exposure to AI security and heavily regulated financial environments
• 100% remote working within Germany
• Flexible hours, 6 months workation (anywhere in the world) and paid or time‑compensated overtime
• Continuous training and development

If you want to shape security from strategy through to implementation, this is an opportunity to make a visible impact.