Information Security Manager (gn)

i-doit GmbH; Düsseldorf; Hybrid; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Remote-first

Flexible working hours

Team events

Tech training & workshops

Ownership & responsibility

Collaborative team

Zusammenfassung

i-doit GmbH is seeking an experienced Information Security Manager to lead our ISO 27001 ISMS within the TechOps department. You will bridge governance, process management, and technical implementation across a cloud-native SaaS environment while maintaining hardware and IT infrastructure.

You will own audits, documentation, and continuous improvement of security controls, collaborating with engineering, operations, and business stakeholders. English fluency is required; German is a bonus.

Qualifikationen

• Proven experience managing an ISO 27001 ISMS end-to-end, including certification and surveillance/recertification audits.
• Experience working in cloud-based SaaS environments - AWS and/or Kubernetes exposure is a strong plus.
• Background in cybersecurity, information security management, or IT compliance.
• Strong stakeholder management and communication skills, with the ability to work effectively with technical and non-technical audiences.

Aufgaben

• Own and drive the information security management system (ISMS) to remain current, effective, and aligned with ISO 27001 standards.
• Create and maintain all documentation required to sustain ISO 27001 certification.
• Organize preparation and execution of internal and external audits and ensure audit-readiness at all times.
• Plan and conduct regular management reviews for the ISMS and continuously improve ISMS processes and controls.
• Oversee security posture of the technical environment, including penetration testing and security controls.

Kenntnisse

ISO 27001 ISMS management

AWS / Kubernetes exposure

Cybersecurity / IT compliance

Stakeholder management

Internal IT support

Ownership mindset

English fluency

Jobbeschreibung

We are looking for an experienced Information Security Manager to join our TechOps department in a split role that combines information security ownership with internal IT management. You have a solid understanding of ISO 27001? You enjoy running and maintaining high scale projects? Then we're looking for you!

We are a company where everyone can make a difference and actively participate in shaping our path. We're actively hiring at earliest availability to expand our team.

Tasks

Owning your field - Your responsibilities

Responsibilities

• As an Information Security Manager (gn) , you'll work at the intersection of governance, process management, and technical implementation all within ISO 27001: You'll translate security requirements into practical processes across a complex, cloud-native SaaS environment as well as maintain hardware, IT infrastructure and assets.
• In this cross-functional role your main responsibilities include:
• Owning and driving our information security management system (ISMS) ensuring it remains current, effective, and up to our ISO 27001 certified standards
• Create and maintain all documentation required to live and sustain our ISO 27001 certification
• Organize the preparation and execution of both internal and external audits and ensure audit-readiness at all times
• Proactively plan and conduct regular management reviews for the ISMS
• Design, implement, and continuously improve ISMS processes and controls across the organization
• Handle the whole risk management including risk identification/assessment and treatment plans up to incident reporting, tracking, and following up
• Oversee the security posture of our technical environment, including e.g. penetration testing, implementation of security controls etc
• Partner closely with engineering, operations, and business stakeholders to embed security practices into day-to-day ways of working
• Support and update local office infrastructure as needed
• Set up and maintain hardware troubleshoot office surroundings (e.g. workstations, meeting room equipment, network devices), acting as first-line support for day-to-day tech issues
• Manage basic user access and account provisioning/deprovisioning for internal systems, in line with security policies

Requirements

Being an asset - The skillset we're looking for

• Proven experience managing an ISO 27001 ISMS end-to-end, including certification and surveillance/recertification audits
• Experience working in or with cloud-based SaaS environments - AWS and/or Kubernetes exposure is a strong plus
• A background in cybersecurity, information security management, or IT compliance
• Strong stakeholder management and communication skills, with the ability to work effectively with both technical and non-technical audiences
• Some hands-on experience with internal IT support
• A proactive, ownership-driven mindset whilst still keeping in touch with the team spirit
• Comfortable switching between strategic/documentation-heavy security work and hands-on, practical IT support tasks
• Fluent English (written and spoken) is a must, German language skills are a bonus
• Located in Germany or the Netherlands with the right to work there and ability & willingness to travel to the Amsterdam location if required

Benefits

More than a job - Benefits to look forward to

• An established company living the energy of the start-up spirit with a culture of trust and constructive growth feedback without the restraint of strict hierarchies
• Based in locations in Amsterdam (NL) and Düsseldorf & Hannover (DE) we are an international company group providing flexible working hours and working models (including remote-first)
• Freedom to expand your professional knowledge. You can educate yourself in tech sessions, training courses, lectures and workshops to exchange knowledge
• Elaborate team events
• A technically varied role with real ownership and responsibility
• A collaborative team of highly skilled professionals

About us

The i-doit group builds software that thousands of IT teams rely on every day: our cabling documentation PATCH MANAGER, the CMDB and IT documentation platform i-doit, plus solutions for ITSM , discovery, ISMS , data protection , and IT emergency management . From our locations in Amsterdam, Netherlands and Düsseldorf & Hannover (Germany), we serve customers worldwide.

We are expanding our cloud business and are hiring at earliest availability - that's where you come in!

Our statement

We celebrate a company culture built on integrity, tolerance and mutual respect. We value each person for their contribution to our identity; regardless of gender, religion, age, sexual orientation, disability or origin. That is why we are proudly committed to equal employment.

Find more English Speaki