Information Security Specialist

THRYVE; Deutschland; Remote; EUR 75,000 - 105,000; Full time

Benefits offered by this job

Remote work within Germany

Flexible hours

Workation 6 months

Overtime compensation

Training & development

Job summary

THRYVE in Germany seeks an Information Security Specialist to own ISMS and AI governance in a 100% remote role. You’ll work closely with engineering teams to translate complex security requirements into practical measures within a highly regulated environment.

This hands-on position focuses on protecting the business, shaping governance and incident response, and aligning security with software development and AI initiatives. Remote work nationwide supports flexible, impactful delivery.

Qualifications

• Experience in information security, IT risk or IT compliance.
• Knowledge of ISO 27001, BSI IT-Grundschutz or NIST.
• Technical understanding of software-development environments.
• Familiarity with DORA, CRA, BCM or financial-sector regulation is a plus.
• Pragmatic, proactive approach to protect the business without slowing it down.

Responsibilities

• Build and develop the ISMS in line with ISO 27001
• Shape security strategy, governance and Business Continuity Management
• Own ICT, information-security and AI risk management
• Implement requirements including DORA and the CRA
• Develop incident-response processes and support real incidents
• Embed security into software-development processes
• Prepare audits and drive resulting actions through to completion
• Help define the company’s approach to secure and responsible AI

Skills

ISMS governance

Information security

IT risk management

Regulatory compliance

AI governance

Job description

Information Security Specialist – ISMS & AI Governance | 100% remote within Germany | Full-time

Want to build an ISMS—not simply maintain one?

Join an established German software and AI company whose technology supports major organisations across the Sparkassen ecosystem. You’ll have real ownership over information security, resilience and AI governance within a highly regulated environment.

This is a hands‑on role where you’ll work directly with engineering teams and turn complex security requirements into measures that genuinely work.

Your impact

• Build and develop the ISMS in line with ISO 27001
• Shape security strategy, governance and Business Continuity Management
• Own ICT, information‑security and AI risk management
• Implement requirements including DORA and the CRA
• Develop incident‑response processes and support real incidents
• Embed security into software‑development processes
• Prepare audits and drive resulting actions through to completion
• Help define the company’s approach to secure and responsible AI

What you’ll bring

• Experience in information security, IT risk or IT compliance
• Knowledge of ISO 27001, BSI IT‑Grundschutz or NIST
• Technical understanding of software‑development environments
• Ideally, experience with DORA, CRA, BCM or financial‑sector regulation
• A pragmatic, proactive approach—you can protect the business without unnecessarily slowing it down

Why consider it?

• Genuine ownership rather than a purely advisory security role
• Direct influence over engineering, governance and business decisions
• Exposure to AI security and heavily regulated financial environments
• 100% remote working within Germany
• Flexible hours, 6 months workation (anywhere in the world) and paid or time‑compensated overtime
• Continuous training and development

If you want to shape security from strategy through to implementation, this is an opportunity to make a visible impact.