Information Security (Senior) Manager (m/w/d)

Meyandy LLC; München; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Training budget included

Competitive base salary 90k–130k EUR p

10 days paid time off

Zusammenfassung

NVISO, Munich-based, seeks an Information Security (Senior) Manager to lead CISOaaS/GRC consultants, drive client security programs and contribute to pre-sales. You will oversee risk assessments, gap analyses and the development of strategy aligned with ISO27001, NIST, GDPR, and related standards.

You will coordinate with clients and stakeholders across functions, ensuring effective security governance while delivering high-quality security services in a fast-paced environment.

Qualifikationen

• NATO clearance eligibility.
• Bachelor's degree in Business Administration, Information Security or related field.
• Professional certifications: CISA, CISSP, CISM, ISO27001 Implementer/Auditor.
• Proven CISO experience or ISO27k/BSI Grundschutz implementations at clients.
• Knowledge of ISO27001, DORA, NIST, NIS-2, GDPR or similar frameworks.
• Strong risk management and security program development skills.
• Excellent English and German communication.
• Leadership and cross-functional collaboration.

Aufgaben

• Lead a team of CISOaaS/GRC consultants to deliver high-quality services.
• Collaborate with clients to understand business objectives and risks.
• Assess client security maturity against ISO/NIST/BSI standards.
• Develop and implement a fit-for-purpose security program.
• Drive the security program and act as security champion.
• Conduct risk assessments and recommend mitigations.
• Oversee implementation of policies, procedures and controls.
• Provide updates to management on the state of security.
• Lead steering committees with stakeholders to guide the program.
• Contribute to pre-sales activities and create Statements of Work.

Kenntnisse

Leadership

Risk management

ISO27001

NIST

BSI Grundschutz

CISO experience

Stakeholder communication

Security governance

German-English

Ausbildung

Bachelor's degree

Jobbeschreibung

# Information Security (Senior) Manager (m/w/d)NVISOVia arbeitnowMunich, DEPubliée il y a 13h## Description du posteIt all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!## TasksYou have a strong interest in cyber security and believe the following to be applicable to you?As an **Information Security Manager (m/w/d), located in Germany,** at NVISO, you will lead our team of CISOaaS or GRC consultants while actively contributing to client projects as well as contributing in pre-sales activities for strategic clients. Your role will be key in enhancing our clients’ cybersecurity posture by creating and driving security strategies and their programs throughout the company. Key responsibilities include, but are not limited to:* Leading and managing a team of CISOaaS/GRC consultants to deliver high-quality services to clients;* Collaborating closely with clients to understand their business objectives, their risks and their unique security requirements;* Assessing the security maturity of clients (using of ISO, BSI or NIST standards) to identify gaps and areas for improvement;* Developing and implementing a fit-for-purpose security program (that aligns with industry standards);* Driving the security program at clients, where you also act as the security champion, spreading the “gospel” on security;* Conducting risk assessments, identifying potential vulnerabilities, and recommending risk mitigation strategies;* Overseeing and supporting with the implementation of the security program, including policies, procedures, and controls;* Providing updates to management on the ‘state of security’ at their company;* Holding steering committees at the customer with relevant stakeholders to guide & adapt the security program, where needed.* Involve yourself actively in the sales process by creating and presenting Statements of Work, project plans, requirements definitions,... for projects running in your team;* Perform technical account management duties for specific top-tier, strategic clients.## Requirements* **You are eligible for NATO Clearance.*** Bachelor’s degree in Business Administration, Information Security, or a related field;* Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISO27001 Implementer/Auditor or equivalent are strongly preferred;* Proven experience in being a CISO and/or having successfully implemented ISO27k or BSI Grundschutz at clients. This covers, but not limited to: risk assessment, security roadmap creation, CISOaaS and policy development;* In-depth knowledge of relevant industry standards and frameworks, such as ISO 27001, DORA, NIST, NIS-2, GDPR, etc.;* Familiarity with risk management methodologies and their application to cybersecurity;* Quickly grasping the complexity and the business reasons for a company to perform security and adapting your communication style and the security program to make it fit for the client;* Excellent English and German written and verbal communication skills to effectively convey complex concepts to technical and non-technical stakeholders;* Leadership skills to manage a team and collaborate with clients and cross-functional teams.## BenefitsAt NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:* A training budget of 10,000 EUR plus 10 days paid time off rolling over two years;* Base salary range (depending on experience and skillset): 90.000 EUR p.a. - 130.000 EUR p.a.* Working with and learning from the best people in the European cyber security “scene”. We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opp...