Information Security Manager

Jobtailor; Düsseldorf; Vor Ort; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a security-focused ISMS specialist to own and drive the ISO 27001-aligned information security program. You will maintain documentation, manage audits, and ensure audit readiness while coordinating with engineering, operations, and business stakeholders.

The role encompasses both strategic security governance and hands-on IT support, including cloud environments (AWS/Kubernetes) and on-premises infrastructure. Fluency in English is required; German is a bonus.

Qualifikationen

• Proven experience managing an ISO 27001 ISMS end-to-end.
• Experience working in or with cloud-based SaaS environments.
• AWS and/or Kubernetes exposure is a strong plus.
• Background in cybersecurity, information security management, or IT compliance.
• Strong stakeholder management and communication skills.
• Ability to work effectively with technical and non-technical audiences.
• Some hands-on experience with internal IT support.
• Proactive, ownership-driven mindset.
• Fluent English, written and spoken; German language skills are a bonus.
• Located in Germany or the Netherlands; right to work in Germany or the Netherlands; travel to Amsterdam if required.

Aufgaben

• Own and drive the information security management system (ISMS).
• Keep the ISMS current, aligned with ISO 27001 standards.
• Create and maintain documentation required for ISO 27001 certification.
• Organize and execute internal and external audits.
• Maintain audit readiness.
• Plan and conduct regular ISMS management reviews.
• Design, implement, and improve ISMS processes and controls.
• Manage risk identification, assessment, treatment plans, incident reporting, tracking, and follow-up.
• Oversee the security posture of the technical environment, including penetration testing and security control implementation.
• Partner with engineering, operations, and business stakeholders to embed security practices.
• Support and update local office infrastructure and hardware.
• Troubleshoot workstations, meeting room equipment, and network devices.
• Provide first-line IT support for day-to-day issues.
• Manage basic user access and provisioning/deprovisioning for internal systems.

Kenntnisse

ISMS Management

ISO 27001

Stakeholder Management

Cloud-Based SaaS Environments

Security Compliance

Audit Readiness

Penetration Testing

Incident Reporting

Security Controls

Proactive Mindset

English Fluent

German Bonus

Hands-on IT Support

AWS

Kubernetes

Tools

AWS

Kubernetes

Network Devices

Workstation Troubleshooting

Jobbeschreibung

• Own and drive the information security management system (ISMS)
• Keep the ISMS current, effective, and aligned with ISO 27001 certification standards
• Create and maintain documentation required for ISO 27001 certification
• Organize and execute internal and external audits
• Maintain audit readiness
• Plan and conduct regular ISMS management reviews
• Design, implement, and improve ISMS processes and controls
• Manage risk identification, assessment, treatment plans, incident reporting, tracking, and follow-up
• Oversee the technical environment's security posture, including penetration testing and security control implementation
• Partner with engineering, operations, and business stakeholders to embed security practices
• Support and update local office infrastructure
• Set up and maintain hardware
• Troubleshoot workstations, meeting room equipment, and network devices
• Provide first-line support for day-to-day technical issues
• Manage basic user access and account provisioning/deprovisioning for internal systems

Requirements

• Proven experience managing an ISO 27001 ISMS end-to-end, including certification and surveillance/recertification audits
• Experience working in or with cloud-based SaaS environments
• AWS and/or Kubernetes exposure is a strong plus
• Background in cybersecurity, information security management, or IT compliance
• Strong stakeholder management and communication skills
• Ability to work effectively with technical and non-technical audiences
• Some hands-on experience with internal IT support
• Proactive, ownership-driven mindset
• Comfortable switching between strategic/documentation-heavy security work and hands-on practical IT support tasks
• Fluent English, written and spoken
• German language skills are a bonus
• Located in Germany or the Netherlands
• Right to work in Germany or the Netherlands
• Ability and willingness to travel to the Amsterdam location if required

Core Competencies

Demonstrates expertise in managing an Information Security Management System (ISMS) aligned with ISO 27001 standards, including risk management, audit execution, and stakeholder collaboration. Proficient in both strategic security documentation and hands-on IT support within cloud-based environments.

Highest-signal resume keywords

• ISO 27001 ISMS Management
• Risk Identification and Assessment
• Cloud-Based SaaS Environments
• Stakeholder Management
• Cybersecurity and IT Compliance

ATS Optimization Keywords

Hard Skills

• ISMS Documentation
• Internal and External Audits
• Penetration Testing
• Security Control Implementation
• User Access Management

Soft Skills

• Strong Communication Skills
• Proactive Mindset
• Ability to Work with Technical and Non-Technical Audiences

Industry Keywords

• Information Security Management
• IT Compliance
• Audit Readiness
• Incident Reporting
• ISO 27001 Certification

Tools & Technologies

• AWS
• Kubernetes
• Network Devices
• Workstation Troubleshooting