Manager (m/f/d) Information Security & Compliance

Hapag-Lloyd AG; Hamburg; On-site; EUR 85,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

13 monthly salaries / vacation pay

Learning Campus

Mentoring programs

Company restaurant

Health & sports offerings

JobRad bicycle leasing

Public transport subsidies

MYPENSION

Job summary

Hapag-Lloyd is seeking a seasoned Information Security leader to shape and drive the organisation's information and cyber security risk agenda. You will translate complex regulations into practical security controls and operate a world-class ISMS in collaboration with the CISO, IT, Legal, Data Protection, and Audit teams.

You will lead the global ISMS program, coordinate audits, raise awareness, report metrics to senior management, and stay ahead of evolving threats and regulatory changes, all

Qualifications

• Extensive experience in information security, cyber security, GRC or compliance.
• Proven track record of building, operating or improving an ISMS in a large, international organization.
• Hands-on experience with audits, certifications and external assessments (ISO 27001, TISAX, etc.)
• Deep knowledge of cyber risk management, security controls and relevant standards (KRITIS, NIS2, NIST, GDPR)
• Excellent communication and stakeholder-management abilities across technical and business audiences
• Demonstrated ability to define and report security metrics and drive continuous improvement
• Fluent in written and spoken English; additional language skills are a plus

Responsibilities

• Shape and execute the global information and cyber security risk management strategy and roadmap.
• Translate regulatory requirements into clear business requirements and controls.
• Develop, maintain and continuously improve ISMS policies, standards and security controls.
• Operate the global ISMS, monitor performance and drive continuous improvement.
• Coordinate external audits, certifications and work with auditors, certification bodies and industry experts.
• Raise security awareness, deliver training and promote secure behaviours across the organisation.
• Define, collect and report meaningful ISMS and security metrics to senior management.
• Monitor emerging threats, regulatory changes and industry trends and recommend practical enhancements.

Skills

Information security

GRC / Compliance

Audits & Certifications

Stakeholder management

English fluent

Job description

You will shape Hapag‑Lloyd's information and cyber security risk agenda, translate complex regulatory requirements into practical solutions, and operate a world‑class Information Security Management System. Working closely with the CISO, IT, Legal, Data Protection, Risk & Control, Audit and business functions, you will drive compliance, resilience and continuous improvement across our global organisation.

• Shape and execute the global information and cyber security risk management strategy and roadmap
• Translate regulatory requirements (KRITIS, NIS2, TISAX, ISO 27001, NIST, GDPR) into clear business requirements and controls
• Develop, maintain and continuously improve ISMS policies, standards and security controls in partnership with technical and business experts
• Operate the global ISMS, monitor performance and drive continuous improvement
• Coordinate external audits, certifications and work with auditors, certification bodies and industry experts
• Raise security awareness, deliver training and promote secure behaviours across the organisation
• Define, collect and report meaningful ISMS and security metrics to senior management
• Monitor emerging threats, regulatory changes and industry trends and recommend practical enhancements

What Makes You A Fit

• Extensive experience in information security, cyber security, GRC or compliance
• Proven track record of building, operating or improving an ISMS in a large, international organization
• Hands‑on experience with audits, certifications and external assessments (ISO 27001, TISAX, etc.)
• Deep knowledge of cyber risk management, security controls and relevant standards (KRITIS, NIS2, NIST, GDPR)
• Excellent communication and stakeholder‑management abilities across technical and business audiences
• Demonstrated ability to define and report security metrics and drive continuous improvement
• Fluent in written and spoken English; additional language skills are a plus

What We Offer You

• Exciting challenges, real responsibility, and the opportunity to make your own ideas visible in a wide range of projects
• Individual development through our Hapag-Lloyd LEARNING CAMPUS, international perspectives, and mentoring programs that genuinely advance your career
• Attractive compensation (13 monthly salaries vacation pay) as well as strong social benefits in a financially stable company
• At least 28 days of vacation, flexible working hours, capital forming benefits, and a future oriented pension plan (MYPENSION)
• A modern hybrid work model (3 days office / 2 days remote) and a workplace in a prime downtown location at Ballindamm
• Mobility benefits such as subsidies for public transportation, as well as bicycle leasing via JobRad
• Comprehensive health and sports offerings (e.g., yoga, sailing, company doctor) plus EGYM Wellpass
• A company restaurant with freshly prepared meals every day and a coffee bar with a wide selection

About Us Hapag-Lloyd is one of the world's leading liner shipping companies, connecting businesses and people across more than 600 worldwide . With a fleet of over 300 modern container ships and a vessel capacity of 2.5 million TEU , we keep global trade moving reliably every day.
Our global network spans 140 countries , 400 offices , and a growing portfolio of terminal and infrastructure investments. This scale enables us to deliver consistent, high‑quality service across continents and to support our customers in even the most complex supply chains.
When you join us, you become part of more than 18,000 colleagues working across borders, functions, and cultures, to not only to deliver quality for our customers, but to create innovation and opportunities across roles, regions, and perspectives.
We believe that every exploration is a chance to grow, and every port is a place to belong. Your Journey, Our Horizon