Information Security Manager (all genders)

NFON; Berlin; Vor Ort; EUR 90 - 120.000; Vollzeit

Benefits dieser Stelle

Flexible hybrid schedule (2 days in 0ff

30 days vacation

Company pension scheme

Workation (up to 20 days/year)

Sabbatical after 3 years

Referral bonus up to €3,000

On-site parking

Office snacks & beverages

Kindergarten allowance

Zusammenfassung

NFON is seeking an Information Security Manager to lead and mature our security program within Privacy & Governance. You will drive the ISMS, policies, risk assessments, and audits while partnering with Privacy, R&D, IT Security, and Legal to embed security across products and operations.

You will strengthen NFON's security posture, build a strong security culture, and collaborate with stakeholders across an international organization. Fluency in German and English is required.

Qualifikationen

• Experience in information security, privacy, cybersecurity, or information security management.
• Solid understanding of security frameworks and standards such as ISO 27001, NIS2, DORA, BSI C5, or comparable frameworks.
• Experience developing and implementing security policies, governance, and risk management processes.
• Knowledge of the German Telecommunications Act (TKG) and the General Data Protection Regulation (GDPR) is an advantage.
• Ability to collaborate with technical and non-technical stakeholders across an international organisation.
• Strong analytical, communication, and stakeholder management skills.
• A proactive, ownership-driven mindset with the ability to build and continuously improve security capabilities.
• Proficiency in German and English.

Aufgaben

• Define, implement, and continuously improve NFON's ISMS and security governance framework.
• Develop and maintain security policies, standards, and procedures aligned with business, regulatory, and customer requirements.
• Conduct security risk assessments and drive mitigation initiatives across products, services, and internal operations.
• Partner with Privacy, R&D, IT Security, Legal, and other stakeholders to embed security into business processes and product development.
• Coordinate internal and external security audits, certifications, and compliance activities.
• Monitor the evolving threat landscape and recommend pragmatic measures to continuously improve NFON's security posture.
• Promote security awareness through training, guidance, and collaboration across the organization.
• Support security incident response activities and drive continuous improvement based on lessons learned.

Kenntnisse

Information Security

Privacy

Cybersecurity

Stakeholder management

Analytical skills

German & English

Jobbeschreibung

As our Information Security Manager (all genders), you will join our growing Information Security team within the broader Privacy & Governance organisation. Together, you will help strengthen and scale NFON's information security capability while protecting our products, services, and business operations. You will drive security governance, collaborate across the business, and contribute to building a strong security culture. This is an opportunity to make a lasting impact in a collaborative environment where you can shape the future of information security at NFON.

• Define, implement, and continuously improve NFON's Information Security Management System (ISMS) and security governance framework.
• Develop and maintain security policies, standards, and procedures aligned with business, regulatory, and customer requirements.
• Conduct security risk assessments and drive mitigation initiatives across products, services, and internal operations.
• Partner with Privacy, R&D, IT Security, Legal, and other stakeholders to embed security into business processes and product development.
• Coordinate internal and external security audits, certifications, and compliance activities.
• Monitor the evolving threat landscape and recommend pragmatic measures to continuously improve NFON's security posture.
• Promote security awareness through training, guidance, and collaboration across the organization.
• Support security incident response activities and drive continuous improvement based on lessons learned.

• Experience in information security, privacy, cybersecurity, or information security management.
• Solid understanding of security frameworks and standards such as ISO 27001, NIS2, DORA, BSI C5, or comparable frameworks.
• Experience developing and implementing security policies, governance, and risk management processes.
• Knowledge of the German Telecommunications Act (TKG) and the General Data Protection Regulation (GDPR) is an advantage.
• Ability to collaborate effectively with technical and non-technical stakeholders across an international organisation.
• Strong analytical, communication, and stakeholder management skills.
• A proactive, ownership-driven mindset with the ability to build and continuously improve security capabilities.
• Proficiency in German and English.

• Permanent employment contract
• Flexible working hours and the option to work hybrid (2 days/week in the office)
• 30 days of vacation
• Modern and ergonomically equipped offices with on-site parking
• Support for further education, including language courses
• Company pension scheme
• Workation (up to 20 days per year)
• Sabbatical opportunity (available after 3 years of company tenure)
• Up to 50 EUR tax-free compensation (combination of Edenred Card for Shopping and Wellpass Membership)
• Professional & confidential mental health support (powered by OpenUp)
• Member at Corporate Benefits
• Choose your preferred device: Windows Laptop or MacBook
• Regular team and company events
• Kindergarten allowance + 10 fully paid child sick days
• JobRad: Good for you, good for the environment
• Subsidy for public transport if office presence >= 60%
• Fruits and beverages in Office
• Referral Programmes - Earn up to €3,000 bonus by referring top talent!