Information Security Manager (gn)

i-doit Group; Düsseldorf; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Remote-first

Flexible hours

Team events

Professional development

Hybrid work model

Zusammenfassung

i-doit group in Germany seeks an experienced Information Security Manager to own ISO 27001 ISMS and manage internal IT in a hybrid, cloud-native SaaS setting. You will translate security requirements into practical processes while maintaining hardware and IT infrastructure, with hands-on support as needed.

Fluent English is required; German is a bonus. Located in Germany or the Netherlands with work eligibility, travel to Amsterdam may be required.

Qualifikationen

• Proven experience managing an ISO 27001 ISMS end-to-end, including certification and surveillance/recertification audits.
• Experience with cloud-based SaaS environments - AWS and/or Kubernetes exposure is a strong plus.
• Background in cybersecurity, information security management, or IT compliance.
• Strong stakeholder management and communication skills, with the ability to work effectively with both technical and non-technical audiences.
• Fluent English (written and spoken); German language skills are a bonus.
• Located in Germany or the Netherlands with the right to work there and ability to travel to Amsterdam if required.

Aufgaben

• Owning and driving our information security management system (ISMS) ensuring it remains current, effective, and up to our ISO 27001 certified standards.
• Create and maintain all documentation required to live and sustain our ISO 27001 certification.
• Organize the preparation and execution of both internal and external audits and ensure audit-readiness at all times.
• Proactively plan and conduct regular management reviews for the ISMS.
• Design, implement, and continuously improve ISMS processes and controls across the organization.
• Handle the whole risk management including risk identification/assessment and treatment plans up to incident reporting, tracking, and following up.
• Oversee the security posture of our technical environment, including e.g. penetration testing, implementation of security controls etc.
• Partner closely with engineering, operations, and business stakeholders to embed security practices into day-to-day ways of working.
• Support and update local office infrastructure as needed.
• Set up and maintain hardware troubleshoot office surroundings (e.g. workstations, meeting room equipment, network devices), acting as first-line support for day-to-day tech issues.
• Manage basic user access and account provisioning/deprovisioning for internal systems, in line with security policies.

Kenntnisse

ISMS management

Audits & certification

Stakeholder management

Cloud-based SaaS

Security controls

IT compliance

English fluent

German bonus

Tools

AWS

Kubernetes

Jobbeschreibung

We are looking for an experienced Information Security Manager to join our TechOps department in a split role that combines information security ownership with internal IT management. You have a solid understanding of ISO 27001? You enjoy running and maintaining high scale projects? Then we’re looking for you!

We are a company where everyone can make a difference and actively participate in shaping our path. We’re actively hiring at earliest availability to expand our team.

Tasks

Owning your field - Your responsibilities

As an Information Security Manager (gn), you’ll work at the intersection of governance, process management, and technical implementation all within ISO 27001: You’ll translate security requirements into practical processes across a complex, cloud-native SaaS environment as well as maintain hardware, IT infrastructure and assets.

In this cross-functional role your main responsibilities include:

• Owning and driving our information security management system (ISMS) ensuring it remains current, effective, and up to our ISO 27001 certified standards
• Create and maintain all documentation required to live and sustain our ISO 27001 certification
• Organize the preparation and execution of both internal and external audits and ensure audit-readiness at all times
• Proactively plan and conduct regular management reviews for the ISMS
• Design, implement, and continuously improve ISMS processes and controls across the organization
• Handle the whole risk management including risk identification/assessment and treatment plans up to incident reporting, tracking, and following up
• Oversee the security posture of our technical environment, including e.g. penetration testing, implementation of security controls etc
• Partner closely with engineering, operations, and business stakeholders to embed security practices into day-to-day ways of working
• Support and update local office infrastructure as needed
• Set up and maintain hardware troubleshoot office surroundings (e.g. workstations, meeting room equipment, network devices), acting as first-line support for day-to-day tech issues
• Manage basic user access and account provisioning/deprovisioning for internal systems, in line with security policies

Requirements

Being an asset - The skillset we’re looking for

• Proven experience managing an ISO 27001 ISMS end-to‑end, including certification and surveillance/recertification audits
• Experience working in or with cloud-based SaaS environments - AWS and/or Kubernetes exposure is a strong plus
• A background in cybersecurity, information security management, or IT compliance
• Strong stakeholder management and communication skills, with the ability to work effectively with both technical and non-technical audiences
• Some hands‑on experience with internal IT support
• A proactive, ownership‑driven mindset whilst still keeping in touch with the team spirit
• Comfortable switching between strategic/documentation‑heavy security work and hands‑on, practical IT support tasks
• Fluent English (written and spoken) is a must, German language skills are a bonus
• Located in Germany or the Netherlands with the right to work there and ability & willingness to travel to the Amsterdam location if required

Benefits

• An established company living the energy of the start-up spirit with a culture of trust and constructive growth feedback without the restraint of strict hierarchies
• Based in locations in Amsterdam (NL) and Düsseldorf & Hannover (DE) we are an international company group providing flexible working hours and working models (including remote‑first)
• Freedom to expand your professional knowledge. You can educate yourself in tech sessions, training courses, lectures and workshops to exchange knowledge
• Elaborate team events
• A technically varied role with real ownership and responsibility
• A collaborative team of highly skilled professionals

About us

The i-doit group builds software that thousands of IT teams rely on every day: our cabling documentation PATCH MANAGER, the CMDB and IT documentation platform i-doit, plus solutions for ITSM, discovery, ISMS, data protection, and IT emergency management. From our locations in Amsterdam, Netherlands and Düsseldorf & Hannover (Germany), we serve customers worldwide. We are expanding our cloud business and are hiring at earliest availability - that's where you come in!

Our statement

We celebrate a company culture built on integrity, tolerance and mutual respect.

We value each person for their contribution to our identity; regardless of gender, religion, age, sexual orientation, disability or origin.

That is why we are proudly committed to equal employment.