Information Security Officer (ISO) -Germany

Eligo Selekcija - Your recruitment partner in the EMEA region; Deutschland; On-site; EUR 65,000 - 95,000; Full time

Job summary

Eligo Selekcija - Your recruitment partner in the EMEA region seeks an Information Security Officer (ISO) to strengthen security across multiple group companies. The role is based in northern Germany (Hamburg/Lübeck/Kiel area) with high travel and involvement in ISMS, audits, risk management and incident response.

Responsibilities include leadership of Information Security Managers, regulatory compliance (NIS-2, CRA) and developing product security structures per CRA.

Qualifications

• Minimum 2 years of professional information security experience.
• Solid knowledge of ISO 27001, CIS Controls and NIS-2 requirements.
• Experience creating ISMS, audits, risk assessments and incident response.
• Ability to communicate across a decentralized structure.

Responsibilities

• Build and improve information security structures aligned with ISO 27001.
• Provide functional leadership to Information Security Managers across group companies.
• Conduct risk assessments, audits, and incident response activities, updating the risk register.
• Ensure compliance with NIS-2 and CRA and with the cyber insurance provider requirements.
• Establish product security structures per CRA across assigned companies.
• Address outstanding ISO 27001 audit findings and implement corrective actions.
• Lead as ISO for the PMB business area and guide PMB ISMs.

Skills

ISO 27001

CIS Controls

NIS-2

InfoSec exp 2y

Job description

For a global management holding company, operating independent business divisions across more than 30 countries and with 10 000 + FTE, we are searching for:

Information Security Officer (ISO) -Germany (fluent German is required)

Important! - Position is primarily based in northern Germany and can be in Hamburg, Lübeck, Kiel or similar. Candidates from that area or willing to relocate there, are preferred.

Reports to: Group CISO (Chief Information & Product Security Officer)

Requirements

• Several years of experience in information security, ideally within a corporate or group environment
• Strong knowledge of established security frameworks, such as ISO 27001 and CIS Controls
• Familiarity with regulatory requirements such as NIS-2 and the Cyber Resilience Act (CRA)
• Experience in establishing ISMS structures, conducting audits, performing risk assessments, and managing incident response
• Ability to communicate and collaborate effectively with various stakeholders across a decentralized corporate structure
• Structured, pragmatic, and solution-oriented approach, with the ability to independently drive new initiatives forward

Must-have skills

• ISO 27001, CIS Controls, NIS-2
• Experience: At least 2 years of professional experience in information security
• Travel requirements: High willingness to travel within Germany, potentially increasing to approximately 75%

Tasks & Responsibilities

• Build and continuously improve robust information security structures aligned with ISO 27001
• Provide functional leadership and guidance to Information Security Managers across the assigned group companies
• Conduct risk assessments, audits, and incident response activities, including maintaining and updating the risk register
• Ensure compliance with regulatory requirements, including NIS-2, and meet the requirements of the company's cyber insurance provider
• As a secondary responsibility, establish and develop product security structures in accordance with the Cyber Resilience Act (CRA) across the assigned companies
• Establish information security structures within the holding company and address outstanding findings from the ISO 27001 audit
• Take on the Information Security Officer (ISO) role for the PMB business area, establish appropriate security structures, and provide professional guidance and support to Information Security Managers across PMB companies

If you want a high-Impact Role, where you can play a key role in building and developing the ISMS, product security, and OT security frameworks, with significant freedom to shape processes and structures, we would be happy to hear from you.

Client can offer a strong career prospects, work directly with the Group CISO, gain visibility up to executive board level, and benefit from a clear succession opportunity towards the Group CISO/CPSO position