Information Security Officer (m/f/d)

Bauer Media Group Heinrich Bauer Verlag KG; Hamburg; On-site; EUR 90,000 - 125,000; Full time

Benefits offered by this job

Flexible working hours & location

Professional development & training

Central Hamburg location with good交通

Health & Wellbeing programs

30 days holiday

Company restaurant & employee benefits

Creative and challenging tasks

Job summary

Bauer Media Group is seeking an Information Security Officer for Gaming & Competitions in Hamburg to lead the ISMS and ensure security governance across markets. You will drive ISO 27001 certification, oversee risk and controls, and partner with product, technology and business teams to embed security by design.

Fluent English is essential; German or Polish is a bonus. The role supports growth, regulatory alignment and secure platforms across Europe.

Qualifications

• Significant experience in information security and cyber security.
• Proven track record implementing and operating ISMS.
• Experience supporting ISO 27001 certification programs.
• Strong knowledge of ISO 27001/27002, risk management and controls.
• Experience with audits, regulators, and risk remediation.
• Understanding of gaming or media sectors is a plus.
• Fluent English; German or Polish is beneficial.

Responsibilities

• Own and lead the Information Security programme for Gaming & Competitions.
• Maintain and improve the ISMS in line with ISO 27001.
• Lead ISO 27001 certification, surveillance and recertification activities.
• Monitor regulatory and contractual requirements across markets.
• Provide security guidance to product, business and tech teams.
• Promote secure development practices and threat modelling.
• Collaborate with Security Architecture, Engineering and Operations.
• Coordinate assurance activities and responses to audits.

Skills

Information security

ISO 27001

Risk management

Audit preparation

Cloud security

Security governance

Stakeholder management

Communication

Vulnerability remediation

Education

Relevant degree or equivalent

Tools

CISSP

CISM

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

At Bauer Media Group, we create content and services that matter to millions of people across Europe. Our Gaming & Competitions business delivers engaging, trusted and innovative experiences for consumers across multiple markets.

As Information Security Officer – Gaming & Competitions, you will play a critical role in protecting these services, ensuring that security, compliance and customer trust are embedded into everything we do. Working within our Group Information & Cyber Security function, you will partner closely with business, product and technology teams to enable secure growth while supporting regulatory and certification requirements.

The Difference You Will Make

This role is the trusted information security partner for Bauer Media's Gaming & Competitions business. You will establish, operate and continuously improve the Information Security Management System (ISMS), ensuring alignment with Bauer Media Group's security framework and international standards such as ISO/IEC 27001.

By combining strategic governance with hands-on security expertise, you will help ensure that our gaming and competition platforms remain secure, compliant and resilient, while enabling innovation and business growth.

Key Responsibilities

Responsibilities include, but are not limited to:

• Own and lead the Information Security programme for the Gaming & Competitions area.
• Establish, maintain and continuously improve the Gaming & Competitions ISMS in accordance with Group policies, standards and ISO/IEC 27001.
• Lead ISO 27001 certification, surveillance and recertification activities.
• Monitor and interpret applicable legal, regulatory, contractual and certification requirements across multiple European markets.
• Contribute to the ongoing development of Bauer Media Group's Information and Cyber Security Management Framework.
• Assess information security risks, identify control gaps and support the implementation of effective mitigation measures.
• Drive remediation activities for audit findings, vulnerabilities, control weaknesses and security exposures.
• Coordinate assurance activities, including evidence collection, control testing and responses to internal, external and regulatory reviews.
• Provide practical security guidance to product, business and technology teams throughout the development lifecycle.
• Promote secure development practices including threat modelling, secure coding, cloud security, application security testing and software supply chain security.
• Collaborate with Security Architecture, Engineering and Operations teams to reduce vulnerabilities, misconfigurations and overall attack surface.
• Support the management of security incidents affecting Gaming & Competitions services and ensure lessons learned are embedded into future controls and processes.
• Build trusted relationships with senior stakeholders and act as a subject matter expert on information security matters.

What We Are Looking For

We know that everyone brings different experiences and perspectives. If you meet most of the criteria below, we encourage you to apply.

• Significant experience in information security, cyber security, technology risk or a related discipline.
• Proven experience implementing, operating and improving Information Security Management Systems.
• Demonstrable experience supporting and maintaining ISO/IEC 27001 certification programmes.
• Strong knowledge of ISO/IEC 27001 and ISO/IEC 27002, including risk management, controls implementation, audit preparation and continuous improvement.
• Experience assessing security risks and driving remediation activities across complex business and technology environments.
• Good understanding of security and compliance requirements within regulated industries; experience within gaming, competitions or similar sectors is advantageous.
• Strong knowledge of application and development security, including secure software development lifecycles, cloud technologies, APIs, CI/CD pipelines and application security testing.
• Ability to communicate complex security concepts clearly to both technical and non-technical audiences.
• Experience working with auditors, regulators, suppliers and senior management stakeholders.
• Strong analytical, problem-solving and stakeholder management skills.
• Relevant degree or equivalent practical experience.
• Professional certifications such as CISSP, CISM, CRISC, CCSP, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor or equivalent are advantageous.
• Fluent English is essential. German or Polish language skills would be beneficial.

What Success Looks Like

Within your first six months, you will have:

• Established the Gaming & Competitions ISMS with clearly defined scope, governance, assets, risks, controls and ownership.
• Built strong and trusted partnerships with Gaming & Competitions stakeholders across business and technology functions.
• Implemented a prioritised remediation programme addressing key risks, vulnerabilities and control gaps.
• Become a recognised and trusted advisor on information security matters for both leadership and operational teams.

#LI-Hybrid #LI-RS1

We are a media business focused on creating content that matters to millions of people across Europe. Our offering extends from print and online publishing to audio broadcasting and entertainment, alongside investments in other media related sectors. With more than 500 million copies sold each year, we are one of Europe’s largest Publishers. From women’s and celebrities’ magazines to TV listings to food and special interest, we own some of the most popular publishing brands in Germany, UK, Poland and France – both digital and print. But not only that. Reaching over 61 million listeners weekly, we operate over 150 radio and podcast brands in nine countries, spanning the UK, Ireland, Poland, Slovakia, Denmark, Sweden, Finland, Norway and Portugal. Family-owned in the 5th generation, Bauer Media focuses on the long-term, with a consumer-first mindset that guides us across our diverse portfolio. Our workforce of 12,000 shares a common purpose: to deliver content and services that enrich people‘s everyday lives.

We want to inspire not only our customers, we also want to inspire our colleagues. How? By giving you the opportunity to take on responsibility and by offering you a long-term perspective.

You can also benefit from our attractive offers:

• Individual solutions for the flexible organisation of working hours and location
• Targeted and individual training for your professional and personal development
• A central location in Hamburg's city centre with good transport options (bus & train)
• Effective health management (e.g. health week, free sports programmes & Wellhub)
• 30 days of holiday & frequent events for employees
• Company restaurant, free magazines & various discounts via corporate benefits
• A culture in which personal responsibility, teamwork and creativity are valued and you have room for creativity and for exciting and challenging tasks

We are an international employer and equal opportunities are important to us. That's why we welcome everyone in their uniqueness, regardless of e.g. religion, gender, skin color, disability in our house.