IT & Information Security Manager (f/m/d)

MARKT-PILOT; Stuttgart; Hybrid; EUR 85,000 - 110,000; Full time

Benefits offered by this job

30 days vacation

Deutschland-Ticket subsidy

Job bikes

Learning & Development budget

Hybrid work option

Team events

WELLPASS discount

Corporate Benefits

Job summary

MARKT-PILOT is seeking an IT & Information Security Manager to own the corporate IT environment and ISMS, ensuring ISO 27001 and SOC 2 readiness. You’ll collaborate with Engineering, Operations, People and Legal, and manage IT infrastructure locally in Stuttgart with regular onsite presence.

You’ll lead vulnerability remediation, SaaS governance, and vendor management while building scalable, well-documented processes in a fast-growing B2B SaaS scale-up. English is required; German is a plus.

Qualifications

• 3–5 years in IT admin, information security, IT operations or similar.
• Hands-on experience with at least one ISO 27001 or SOC 2 audit; understanding of ISMS, risk mgmt, access controls.
• Practical experience administering Microsoft 365 and IAM environments.
• Experience managing SaaS tools, licenses, vendors and external IT providers.
• Ability to translate technical/compliance requirements into pragmatic business processes; strong PM, documentation and stakeholder mgmt.
• Hands-on mindset, able to solve urgent operational issues; build scalable processes.
• Fluency in English; German is a plus.

Responsibilities

• Own the ISMS and ISO 27001 and SOC 2 readiness, incl. policies, risks, controls, evidence, audits and remediation.
• Coordinate security incidents, business continuity and disaster recovery testing and documentation.
• Own IT admin and infrastructure ops: Microsoft 365, IAM, employee lifecycle, endpoint security, patching, backups, asset mgmt; manage IT partners.
• Coordinate vulnerability remediation and network management with Engineering and external providers.
• Manage SaaS tools, licenses, vendors and renewals; perform third-party risk assessments and cost optimisation.
• Establish governance for AI tools, GDPR measures and security questionnaires.
• Support urgent IT issues and local infrastructure as needed.

Skills

ISO 27001 / SOC2 experience

Microsoft 365 administration

Identity & access management

SaaS tools management

Vendor & licenses management

Project management & documentation

Stakeholder management

English fluency

Education

ISO 27001 Lead Implementer / Lead Auditor / CISA / CISM (beneficial)

Security/compliance certifications (beneficial)

Tools

Microsoft 365

Job description

We are one of the fastest growing B2B scale-ups in Germany, creating real value for the engineering industry. With our software, we are setting a new standard in the spare parts business, enabling comprehensive market transparency for the first time. To achieve this, we challenge the status quo every day and support our employees in actively shaping their careers and pushing their own boundaries. Become part of a team that can't be stopped, that overcomes challenges together and celebrates success together.

Be part of our success story and join us as IT & Information Security Manager (f/m/d)!

As our IT & Information Security Manager, you will take ownership of our corporate IT environment and information security management system. You will ensure that our ISO 27001 certification and SOC 2 attestation are managed professionally, that our internal systems remain secure and scalable, and that employees have access to the right tools and technology.

You will work closely with Engineering, Business Operations, People, Legal and external security and IT partners. While external specialists will continue to support us, your goal will be to build strong internal ownership and make security and IT operations an integral part of how we run the business.

The role is based in Stuttgart and requires regular onsite presence, as you will also take responsibility for our local IT infrastructure and server room.

Are you ready? Join the crew!

Your Mission

• Own the ISMS and ongoing ISO 27001 and SOC 2 readiness, including policies, risks, controls, evidence, audits and remediation.
• Coordinate security incidents, business continuity and disaster recovery, including testing and documentation.
• Own IT admin and infrastructure operations, including Microsoft 365, identity and access, employee lifecycle processes, endpoint security, patching, backups, and asset management. Handle complex or urgent IT issues and manage IT partners.
• Coordinate vulnerability remediation and network management with Engineering and external providers.
• Manage SaaS tools, licences, vendors and renewals, including third-party risk assessments and cost optimisation with Business Operations.
• Establish practical governance for AI tools, customer security questionnaires and GDPR-related measures.
• Support urgent IT issues and local infrastructure when needed.

Your Skills

• Approximately 3–5 years of experience in IT admin, information security, IT operations, or a comparable role.
• Hands-on experience supporting at least one ISO 27001 certification or SOC 2 audit, with a good understanding of ISMS processes, risk management, access controls and audit evidence.
• Practical experience administering Microsoft 365 and identity and access management environments.
• Experience managing SaaS tools, licenses, technology vendors and external IT providers.
• The ability to translate technical and compliance requirements into pragmatic business processes, supported by strong project management, documentation and stakeholder management skills.
• A hands-on mindset and the willingness to solve urgent operational issues when needed, while building scalable and well-documented processes.
• Fluency in English. German is a plus
• ISO 27001 Lead Implementer, Lead Auditor, CISA, CISM or comparable qualification, as well as experience in a B2B SaaS or scale-up environment, are helpful but not required.
• Our modern and open scale-up culture gives you the freedom to unleash your creativity within a dynamic and agile team.
• Fail Fast, Learn Faster: Feedback here is exactly what it should be - an essential part of your work.
• We invest in your growth: Discover our Learning & Development programs - including an L&D budget!
• Flexible working hours and the option to work hybrid.
• Rest is important too - 30 days of vacation
• Travel by Train: Even MARKT-PILOTS take the train! We subsidize your monthly Deutschland-Ticket!
• Job bikes for those who prefer to travel on two wheels!
• Crew-Love: Look forward to regular team events, exciting gaming sessions, and much more.
• Stay Healthy: With a discounted WELLPASS membership and healthy snacks, you can always recharge your batteries.
• Corporate Benefits: Discover a variety of attractive offers from top brands with exclusive discounts.

Awarded as a Top-5%-Employer for the 5th time in a row. Fly with us @MARKT-PILOT!