Information Security Manager (all genders)

NFON AG; München; Hybrid; EUR 90.000 - 125.000; Vollzeit

Benefits dieser Stelle

Flexible working hours

Hybrid work (2 days/week in office)

30 days vacation

Pension scheme

Workation opportunities

Sabbatical after 3 years

Zusammenfassung

NFON AG in Munich seeks an Information Security Manager to lead our ISMS and security governance. You will partner with Privacy, IT Security, Legal and R&D to embed security into products and operations, drive audits, and continuously improve our posture in a multinational environment.

You will promote security awareness, coordinate incident response, and influence a culture of secure design. Hybrid work is available, with two days in the office and generous vacation.

Qualifikationen

• Experience in information security, privacy, cybersecurity, or information security management.
• Strong understanding of security frameworks and standards (ISO 27001, NIS2, DORA, BSI C5).
• Ability to collaborate with technical and non-technical stakeholders across an international organisation.

Aufgaben

• Define, implement, and continuously improve NFON's ISMS and security governance framework.
• Develop and maintain security policies, standards, and procedures aligned with requirements.
• Conduct security risk assessments and drive mitigation across products, services, and operations.
• Partner with Privacy, R&D, IT Security, Legal and other stakeholders to embed security into processes.
• Coordinate internal and external security audits, certifications, and compliance activities.
• Monitor threat landscape and recommend measures to improve security posture.
• Promote security awareness through training and guidance across the organisation.
• Support security incident response and drive improvements from lessons learned.

Kenntnisse

Information security

Privacy

Cybersecurity

ISMS

Security governance

Stakeholder management

German & English

Tools

ISO 27001

NIS2

DORA

BSI C5

Jobbeschreibung

As our Information Security Manager (all genders), you will join our growing Information Security team within the broader Privacy & Governance organisation. Together, you will help strengthen and scale NFON's information security capability while protecting our products, services, and business operations. You will drive security governance, collaborate across the business, and contribute to building a strong security culture. This is an opportunity to make a lasting impact in a collaborative environment where you can shape the future of information security at NFON.

Your new role

As our Information Security Manager (all genders), you will join our growing Information Security team within the broader Privacy & Governance organisation. Together, you will help strengthen and scale NFON's information security capability while protecting our products, services, and business operations. You will drive security governance, collaborate across the business, and contribute to building a strong security culture. This is an opportunity to make a lasting impact in a collaborative environment where you can shape the future of information security at NFON.

The work you'll do

• Define, implement, and continuously improve NFON's Information Security Management System (ISMS) and security governance framework.
• Develop and maintain security policies, standards, and procedures aligned with business, regulatory, and customer requirements.
• Conduct security risk assessments and drive mitigation initiatives across products, services, and internal operations.
• Partner with Privacy, R&D, IT Security, Legal, and other stakeholders to embed security into business processes and product development.
• Coordinate internal and external security audits, certifications, and compliance activities.
• Monitor the evolving threat landscape and recommend pragmatic measures to continuously improve NFON's security posture.
• Promote security awareness through training, guidance, and collaboration across the organization.
• Support security incident response activities and drive continuous improvement based on lessons learned.

The qualifications you need

• Experience in information security, privacy, cybersecurity, or information security management.
• Solid understanding of security frameworks and standards such as ISO 27001, NIS2, DORA, BSI C5, or comparable frameworks.
• Experience developing and implementing security policies, governance, and risk management processes.
• Knowledge of the German Telecommunications Act (TKG) and the General Data Protection Regulation (GDPR) is an advantage.
• Ability to collaborate effectively with technical and non-technical stakeholders across an international organisation.
• Strong analytical, communication, and stakeholder management skills.
• A proactive, ownership-driven mindset with the ability to build and continuously improve security capabilities.
• Proficiency in German and English.

What we can offer you

• Permanent employment contract
• Flexible working hours and the option to work hybrid (2 days/week in the office)
• 30 days of vacation
• Modern and ergonomically equipped offices with on-site parking
• Support for further education, including language courses
• Company pension scheme
• Workation (up to 20 days per year)
• Sabbatical opportunity (available after 3 years of company tenure)
• Up to 50 EUR tax-free compensation (combination of Edenred Card for Shopping and Wellpass Membership)
• Professional & confidential mental health support (powered by OpenUp)
• Member at Corporate Benefits
• Choose your preferred device: Windows Laptop or MacBook
• Regular team and company events
• Kindergarten allowance + 10 fully paid child sick days
• JobRad: Good for you, good for the environment
• Subsidy for public transport if office presence >= 60%
• Fruits and beverages in Office
• Referral Programmes - Earn up to €3,000 bonus by referring top talent!