IT & Information Security Manager (f/m/d)

MARKT-PILOT; Stuttgart; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Hybrid work

30 days vacation

Deutschland-Ticket subsidy

Job bikes

Team events

Wellness program

Learning & Development budget

Corporate Benefits

Zusammenfassung

MARKT-PILOT is seeking an IT & Information Security Manager (f/m/d) in Stuttgart to own our ISMS and lead ISO 27001 and SOC 2 readiness. You will secure our Microsoft 365 and IAM environments, coordinate incidents, and manage IT operations with cross-functional teams.

The role emphasizes practical governance, risk controls, and scalable processes. You will collaborate with Engineering, People, Legal, and external partners, ensuring security integrates into everyday business.

Qualifikationen

• Hands-on IT admin, information security, or IT operations experience.
• Experience with ISO 27001 and SOC 2 readiness.
• Strong knowledge of ISMS and risk management.
• Experience with Microsoft 365 and IAM.
• Ability to translate technical requirements into processes.

Aufgaben

• Own ISMS and ongoing ISO 27001 readiness, including policies, risks, controls, evidence, audits, remediation.
• Coordinate security incidents, business continuity and disaster recovery, including testing and documentation.
• Own IT admin and infrastructure operations, including Microsoft 365, IAM, employee lifecycle, endpoint security, patching, backups, asset management.
• Coordinate vulnerability remediation and network management with Engineering and external providers.
• Manage SaaS tools, licenses, vendors and renewals, including third-party risk assessments and cost optimisation.
• Establish governance for AI tools, customer security questionnaires and GDPR measures.
• Support urgent IT issues and local infrastructure when needed.

Kenntnisse

ISO 27001

SOC 2

ISMS processes

Risk management

Access controls

Audit evidence

Microsoft 365 admin

Identity & access management

Vendor management

Project management

Documentation

Stakeholder management

English fluency

German language

Ausbildung

ISO 27001 Lead Implementer/Auditor or CISA/CISM (optional)

Tools

Microsoft 365

Jobbeschreibung

Be bold, think big and grow with us!We are one of the fastest growing B2B scale-ups in Germany, creating real value for the engineering industry. With our software, we are setting a new standard in the spare parts business, enabling comprehensive market transparency for the first time. To achieve this, we challenge the status quo every day and support our employees in actively shaping their careers and pushing their own boundaries. Become part of a team that can't be stopped, that overcomes challenges together and celebrates success together.

Be bold, think big and grow with us!We are one of the fastest growing B2B scale-ups in Germany, creating real value for the engineering industry. With our software, we are setting a new standard in the spare parts business, enabling comprehensive market transparency for the first time. To achieve this, we challenge the status quo every day and support our employees in actively shaping their careers and pushing their own boundaries. Become part of a team that can't be stopped, that overcomes challenges together and celebrates success together.

Be bold, think big and grow with us!We are one of the fastest growing B2B scale-ups in Germany, creating real value for the engineering industry. With our software, we are setting a new standard in the spare parts business, enabling comprehensive market transparency for the first time. To achieve this, we challenge the status quo every day and support our employees in actively shaping their careers and pushing their own boundaries. Become part of a team that can't be stopped, that overcomes challenges together and celebrates success together. Be part of our success story and join us as IT & Information Security Manager (f/m/d)!As our IT & Information Security Manager, you will take ownership of our corporate IT environment and information security management system. You will ensure that our ISO 27001 certification and SOC 2 attestation are managed professionally, that our internal systems remain secure and scalable, and that employees have access to the right tools and technology. You will work closely with Engineering, Business Operations, People, Legal and external security and IT partners. While external specialists will continue to support us, your goal will be to build strong internal ownership and make security and IT operations an integral part of how we run the business. The role is based in Stuttgart and requires regular onsite presence, as you will also take responsibility for our local IT infrastructure and server room.

Are you ready? Join the crew!

Your Mission

• Own the ISMS and ongoing ISO 27001 and SOC 2 readiness, including policies, risks, controls, evidence, audits and remediation.
• Coordinate security incidents, business continuity and disaster recovery, including testing and documentation.
• Own IT admin and infrastructure operations, including Microsoft 365, identity and access, employee lifecycle processes, endpoint security, patching, backups, and asset management. Handle complex or urgent IT issues and manage IT partners.
• Coordinate vulnerability remediation and network management with Engineering and external providers.
• Manage SaaS tools, licences, vendors and renewals, including third-party risk assessments and cost optimisation with Business Operations.
• Establish practical governance for AI tools, customer security questionnaires and GDPR-related measures.
• Support urgent IT issues and local infrastructure when needed.

Your Profile

• Approximately 3-5 years of experience in IT admin, information security, IT operations, or a comparable role.
• Hands‑on experience supporting at least one ISO 27001 certification or SOC 2 audit, with a good understanding of ISMS processes, risk management, access controls and audit evidence.
• Practical experience administering Microsoft 365 and identity and access management environments.
• Experience managing SaaS tools, licences, technology vendors and external IT providers.
• The ability to translate technical and compliance requirements into pragmatic business processes, supported by strong project management, documentation and stakeholder management skills.
• A hands‑on mindset and the willingness to solve urgent operational issues when needed, while building scalable and well‑documented processes.
• Fluency in English. German is a plus
• ISO 27001 Lead Implementer, Lead Auditor, CISA, CISM or comparable qualification, as well as experience in a B2B SaaS or scale‑up environment, are helpful but not required.

Your Benefits

• Our modern and open scale-up culture gives you the freedom to unleash your creativity within a dynamic and agile team.
• Fail Fast, Learn Faster: Feedback here is exactly what it should be - an essential part of your work.
• We invest in your growth: Discover our Learning & Development programs - including an L&D budget!
• Flexible working hours and the option to work hybrid.
• Rest is important too - 30 days of vacation
• Travel by Train: Even MARKT-PILOTS take the train! We subsidize your monthly Deutschland-Ticket!
• Job bikes for those who prefer to travel on two wheels!
• Crew-Love: Look forward to regular team events, exciting gaming sessions, and much more.
• Stay Healthy: With a discounted WELLPASS membership and healthy snacks, you can always recharge your batteries.
• Corporate Benefits: Discover a variety of attractive offers from top brands with exclusive discounts.

Awarded as a Top-5%-Employer for the 5th time in a row. Fly with us @MARKT-PILOT!

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.