Information Security Manager (m/f/d)

Egon Oldendorff Management GmbH; Lübeck; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Flat hierarchies

International team

Zusammenfassung

Oldendorff CARRIERS in Lübeck seeks an Information Security Manager to shape its digital future within a modern Technology organization. You will build and operate the ISMS, align with ISO/IEC 27001 and NIST CSF, and advise internal teams on governance, risk, and compliance across global operations.

This role requires a degree in Computer Science or Information Security, strong communication across cultures, and the ability to travel.

Qualifikationen

• A degree in Computer Science, Information Security, or a comparable qualification.
• In-depth experience in information security management with ISO/IEC 27001, NIST CSF knowledge.
• Technical understanding of IT systems, security architectures and security solutions.
• Structured, analytical, risk-based approach with ownership.
• Strong communication to IT teams, stakeholders and external parties across cultures.
• Willingness to travel occasionally or visit vessels for global information security activities.
• Fluency in written and spoken English.
• Nice-to-have certifications such as CISM, ISO/IEC 27001 Implementer/Auditor, ISA/IEC 62443.

Aufgaben

• Build, develop, and operate the Information Security Management System and support the Safety Management System, with continuous improvement.
• Implement and manage regulatory requirements (e.g., KRITIS, NIS2, IMO).
• Develop, maintain, and improve information security policies, standards, and procedures.
• Own information security risk management across the organization and third parties; define and monitor mitigations.
• Advise internal departments on governance, risk, and compliance and promote a security culture.
• Support audits and internal revisions to ensure compliance and drive improvements.

Kenntnisse

Information security management

ISO/IEC 27001

NIST CSF

Security risk assessment

Regulatory compliance

Security architecture

Communication

Travel flexibility

English fluency

Ausbildung

Degree in Computer Science or Information Security

Jobbeschreibung

Founded in 1921, OLDENDORFF CARRIERS combines its history as a German shipowner with the network of one of the world's leading drybulk operators. We currently control some 750 chartered and owned vessels of 67 mio tdw, and we carry around 330 mio tons of raw materials and semi-finished products across the seven seas each year. Our customers can expect 100% performance. All the way.

As part of our ongoing journey towards a modern and innovative Technology organization, we are looking to further strengthen our Information Security Team. We are searching for an Information Security Manager who will play an integral part in shaping Oldendorff's digital future - and in keeping it secure.

Job Responsibilities

• Build, develop, and operate the Information Security Management System and support the Safety Management System, taking ownership of its continuous improvement.
• Implement and manage regulatory requirements (e.g., KRITIS, NIS2, IMO), ensuring they are reflected in the organization's security governance.
• Develop, maintain, and continuously improve the full set of information security policies, standards, and procedures, translating complex requirements into clear, actionable documents.
• Own the information security risk management process across the organization and its third-party suppliers and service providers: identify and assess risks, and define, track, and monitor mitigation measures.
• Act as information security partner for internal departments, advising on governance, risk, and compliance topics and actively promoting a strong security culture across the organization.
• Support audits and internal revisions, ensuring continuous compliance and driving improvements based on findings and evolving requirements.

What You Bring Along

• Degree in Computer Science, Information Security, or a comparable qualification.
• In-depth experience in information security management, with good knowledge of relevant standards and frameworks (e.g., ISO/IEC 27001, NIST CSF).
• Technical understanding of IT systems, security architectures, and security solutions, enabling you to assess risks, set requirements for and evaluate the effectiveness of security measures.
• A structured, analytical, and risk-based working approach with a high level of ownership and motivation to drive improvements.
• Confident communicator able to explain governance requirements clearly to IT teams, business stakeholders, management, and external parties, and comfortable collaborating across cultures, time zones, functions, and levels of seniority.
• A proactive team player able to work independently, drive topics forward, and follow up on actions with persistence and professionalism.
• Willingness to travel occasionally or visit vessels as part of global information security activities.
• Fluency in written and spoken English.Nice-to-have
• Certifications such as CISM, ISO/IEC 27001 Implementer/Auditor, or ISA/IEC 62443.
• Exposure to audit, compliance, or IT governance activities.
• Basic understanding of maritime or Operational Technology (OT) regulated environments and familiarity with related frameworks (e.g., IEC 62443, KRITIS).

What We Offer

• Our corporate culture is special: relaxed and international, open and traditionally with flat hierarchies.
• Since the very beginning, teamwork and quick decision making have been our success factors. Encouraging our employees to realize their ideas and initiatives is as important to us.

If you want to know more about who we are: Oldendorff .

Please contact Arianita Kersten in case of questions.