Information Security Expert

MAM Gruppe; Frankfurt; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

MAM Gruppe Limited is seeking an Information Security Expert in Frankfurt am Main to shape and govern the organisation's information security framework. The role sits between security risk and business, turning complex risks into actionable guidance for decision-makers.

This hybrid position requires 2–3 days in the Frankfurt office and involves policy ownership, risk evaluation, audits support, and cross‑functional collaboration with IT, risk and data protection teams.

Qualifications

• Background in information security, IT security or security risk management.
• Strong governance and risk assessment knowledge, including ISO 27001.
• In-depth knowledge of DORA with hands-on implementation in finance.
• Experience in financial services or regulated sectors is a plus.
• Ability to discuss technical security topics in business terms.
• Organised, pragmatic approach with ability to push back when needed.
• Excellent relationship-building across business and tech teams.
• Fluency in written and spoken German.

Responsibilities

• Own and evolve security policies, standards and procedures for ISMS.
• Evaluate risk across business processes, apps and IT services; propose mitigations.
• Act as security requirements contact for projects and new services/tech changes.
• Test existing controls, identify weaknesses and drive remediation with teams.
• Prepare evidence for audits and regulatory reviews.
• Collaborate with IT, risk, compliance and data protection on security topics.
• Report to management on security position, risks, findings and priorities.
• Support awareness initiatives and participate in post-incident reviews.

Skills

InfoSec background

Governance & risk

DORA knowledge

Financial sector exp

Security communication

Structured pragmatism

Stakeholder skills

German language

Job description

Information Security Expert | Frankfurt am Main

A financial services organisation in Frankfurt is looking to add an Information Security Expert to its team. Sitting between security risk and the wider business, you’ll shape the framework that governs how the organisation protects its information and make sure its controls are both effective and proportionate. The role will suit someone with solid technical grounding who favours practical solutions and can turn complex risks into advice that decision-makers can act on.

This is a hybrid position, with two to three days a week spent in the Frankfurt office.

The role:

• Own and evolve security policies, standards and procedures as part of the ongoing development of the organisation’s ISMS.
• Evaluate risk across business processes, applications and IT services, and propose mitigation that fits the level of exposure.
• Act as a point of contact for project teams and the business on security requirements when new services or technology changes are introduced.
• Test how well existing controls are working, identify weaknesses and drive remediation with the responsible teams.
• Prepare evidence for, and support, internal and external audits as well as regulatory reviews.
• Work alongside colleagues in IT, risk, compliance and data protection on shared security topics.
• Report to management on the organisation’s security position, setting out key risks, findings and improvement priorities.
• Help deliver awareness initiatives and take part in post-incident reviews to capture lessons learned.

What you’ll need:

• A background in information security, IT security or security risk management.
• A firm grasp of security governance and risk assessment, including control frameworks such as ISO 27001.
• In-depth knowledge of DORA, with hands‑on involvement in implementing it in a financial services setting.
• Previous exposure to financial services or another regulated sector would be beneficial.
• Confidence in discussing technical security matters and framing them in business terms.
• An organised, pragmatic way of working, with the judgement to push back constructively and balance competing demands.
• Strong relationship‑building skills across business and technology teams.
• Fluency in written and spoken German.