Information Security Manager - 2nd line

Barclay Simpson; Deutschland; Vor Ort; EUR 65.000 - 95.000; Vollzeit

Zusammenfassung

A leading company in the financial services industry is seeking a Manager-level Information Security Assessor to enhance their security audit and compliance functions. This role involves independent assessments, leading assurance methodologies, and ensuring adherence to regulatory frameworks like DORA and ISO 27001. The ideal candidate will have substantial experience in Information Security, strong stakeholder engagement skills, and relevant professional certifications.

Qualifikationen

• 5+ years of experience in Information Security or IT Audit, ideally in Financial Services.
• Solid knowledge of security standards and regulatory frameworks.
• Fluent in German and English.

Aufgaben

• Perform independent assessments of information security controls.
• Lead and evolve security assurance methodology and reporting practices.
• Review compliance with internal security policies and external regulatory requirements.

Kenntnisse

Information Security

IT Audit

Risk Management

Stakeholder Engagement

Reporting

Ausbildung

CISA certification

CISSP certification

CRISC certification

ISO 27001 Lead Auditor certification

Tools

ISO 27001

NIST

COBIT

Jobbeschreibung

We're looking for a Manager-level Information Security Assessor to join the Second Line of Defense, helping to strengthen our internal security audit, assurance, and oversight capabilities. This role plays a key part in challenging first-line control implementation, supporting regulatory readiness, and ensuring alignment with frameworks like DORA, ISO 27001, and BAIT.

What You'll Do:

• Perform independent assessments of information security controls, including within outsourced environments
• Lead and evolve our security assurance methodology, audit planning, and reporting practices
• Review compliance with internal security policies and external regulatory requirements
• Provide challenge and oversight to 1LoD on control effectiveness, remediation, and exception handling
• Contribute to senior risk reporting, metrics, and regulatory reviews

What You Bring:

• 5+ years of experience in Information Security, IT Audit, or Risk, ideally in Financial Services
• Solid knowledge of security standards (ISO 27001, NIST, COBIT) and regulatory frameworks (DORA, BAIT, MaRisk)
• Strong reporting and stakeholder engagement skills, with the ability to influence across the business
• Preferred certifications: CISA, CISSP, CRISC, or ISO 27001 Lead Auditor
• Fluent in German & Englis