Information Security Manager

MAM Gruppe Limited; Hamburg; On-site; EUR 70,000 - 110,000; Full time

Job summary

MAM Gruppe Limited in Hamburg is seeking an Information Security Manager to strengthen its global security governance, risk management and compliance programme, onsite 3 days per week. You will work with the CISO and stakeholders across IT, Legal, Data Protection, Risk and Audit to shape the security strategy and drive continuous improvement of the ISMS.

Responsibilities include translating regulatory requirements into controls, developing policies, coordinating audits, delivering security

Qualifications

• Extensive information security experience with ISMS
• Strong understanding of regulatory frameworks (ISO 27001, GDPR, NIST)
• Ability to translate complex requirements into actionable controls

Responsibilities

• Translate requirements from KRITIS, NIS2, TISAX, ISO 27001, NIST and GDPR into practical business requirements and security controls.
• Develop and maintain information security policies, standards and controls alongside technical and business teams.
• Oversee the global ISMS, monitor its effectiveness and identify opportunities for improvement.
• Coordinate external audits and certifications with auditors and certification bodies.
• Deliver security awareness and training initiatives across the organisation.
• Define and report meaningful security metrics to senior management.
• Monitor emerging threats and regulatory developments to recommend improvements.
• Develop and implement the global information and cyber security risk management strategy and roadmap.

Skills

Information security

ISMS governance

Risk management

Policy development

Stakeholder management

Security standards understanding

Education

Bachelor’s degree in Cyber/Security or related

Job description

Hamburg | Onsite 3 days per week | German speaking preferred

We are supporting an international organisation in its search for an Information Security Manager to strengthen its global security governance, risk management and compliance programme.

Working closely with the CISO and stakeholders across IT, Legal, Data Protection, Risk, Audit and the wider business, you will help shape the security strategy and drive the continuous improvement of the global Information Security Management System (ISMS).

Your responsibilities:

• Translate requirements from KRITIS, NIS2, TISAX, ISO 27001, NIST and GDPR into practical business requirements and security controls.
• Develop and maintain information security policies, standards and controls alongside technical and business teams.
• Oversee the global ISMS, monitor its effectiveness and identify opportunities for improvement.
• Coordinate external audits and certifications, working closely with auditors and certification bodies.
• Deliver security awareness and training initiatives that encourage secure behaviour across the organisation.
• Define and report meaningful security metrics to senior management.
• Monitor emerging threats, regulatory developments and industry trends to recommend practical improvements.
• Develop and implement the global information and cyber security risk management strategy and roadmap.

Your profile:

• Extensive experience in information security, with a strong focus on ISMS, governance, risk and compliance.
• A sound understanding of relevant security standards and regulatory frameworks.
• The ability to translate complex requirements into clear, achievable actions.
• Strong communication and stakeholder management skills, with confidence engaging senior leadership.