Information Security Manager (f/m/d) - Senior

PSI Software; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

PSI Software is seeking an Information Security Manager (f/m/d) to drive and mature our information security program across the organization in Germany. You will own the ISMS, shape policies, coordinate risk assessments and lead security governance with engineers and leaders.

In this role you’ll advance audit readiness for ISO 27001, TISAX and related standards, strengthen our security culture, and enable secure collaboration with vendors and product teams while maintaining a steady focus on

Qualifikationen

• Solid know-how in Information Security Management and frameworks (ISO 27001, NIST, etc.).
• Understanding of business and software development processes.
• Experience in information security governance with effective policies and controls.
• Strategic mindset with focus on long-term sustainability.
• Experience in risk management and prioritization.
• Good grasp of cloud security (GCP, Office 365).
• Analytical thinker and thought leader; define best practices.
• Ownership mentality from concept to completion.
• Lean and agile principles in secure development.
• Excellent communication across audiences.
• Fluent in English; German at least B2 preferred.

Aufgaben

• Drive PSI's information security management across topics.
• Own ISMS; ensure it is sustainable and effective.
• Design and refine policies and processes; enable security as an enabler.
• Support security reviews, assessments, and reporting; turn insights into action.
• Elevate risk management across PSI; continuously improve handling of security risks.
• Collaborate across business units and leadership to speak the language of security.
• Involve in due diligence activities and secure partnerships.
• Play a key role in audit preparation and execution (ISO 27001, TISAX).
• Strengthen security culture and knowledge sharing across the organization.
• Support incident management with calm focus when needed.

Kenntnisse

ISMS governance

ISO 27001

NIST framework

Cloud security

Risk management

Policy design

Audit readiness

Communications

Lean/Agile

B2 English/German

Tools

Terraform

Jobbeschreibung

The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2,300 employees, PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply, production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.

We are looking for an Information Security Manager (f/m/d)

Tasks inspiring you

• Be the driving force behind PSI's information security management - shape, improve and future-proof it across a wide range of topics
• Take ownership of our Information Security Management System (ISMS) and make it both sustainable and effective
• Bring structure and clarity to governance: design and refine policies, processes, make information security an enabler - not a blocker
• Support security reviews, assessments, and reporting - turning insights into action
• Elevate our risk management: identify, assess and continuously improve how we handle security risks across PSI
• Collaborate across all business units and levels - from engineers to leadership - and help everyone speak the language of security
• Get involved in due diligence activities (vendor, product, or internal assessments) and ensure we partner securely
• Play a key role in audit preparation as well as execution (ISO 27001, TISAX, and more) and ensure PSI is always audit-ready
• Strengthen our security and compliance culture, and drive knowledge sharing within the team and across the organization
• Support incident management with a calm mind and sharp focus when it matters most

Qualifications that inspire us

• Solid know-how in Information Security Management and frameworks (ISO 27001, NIST, etc.)
• Strong understanding of business and organizational processes, ideally within the software industry
• Proven experience in information security governance - you know how to create, refine, and implement policies and controls that actually work
• Strategic mindset - you see the big picture and ensure long-term sustainability
• Experience in risk management and a keen sense for prioritization
• Good grasp of cloud security (especially GCP and Office 365)
• Analytical thinker and thought leader - you don't just follow best practices, you help define them
• Ownership mentality - you take full responsibility from concept to completion
• Understanding of lean and agile principles - and how they empower secure development
• Excellent communication skills - clear, precise, and confident across all audiences
• Commitment to operational excellence and continuous improvement
• Fluent in English, German (at least B2) preferred
• Most importantly: a genuine passion for information security, curiosity, and a love for continuous learning

Nice-to-have

• Certifications such as CISM, ISO 27001 Lead Auditor, CIPM, CIPP/E, GCP Cloud Engineer/Security, MS365 Security, etc.
• Experience with Terraform or other infrastructure-as-code tools