Manager of Information Security (m/f/d)

BizLink Group; Roth; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

30 days holiday

Company pension

AVWL health promotion

Health promotion with ergonomic work

Descripción de la vacante

BizLink Group seeks an experienced Information Security professional to lead regional compliance across the EU and North America. You will align business units with global policies, perform risk assessments, and manage third-party security programs.

The role demands deep ISO27001 knowledge, strong stakeholder skills, and the ability to translate complex standards into practical procedures across diverse teams in Germany and beyond.

Formación

• 5 years in Information Security, GRC, compliance, IT audit, or risk management functions.
• Strong knowledge of EU regulatory landscape and North American compliance requirements.
• Excellent communication and stakeholder management; audit technical procedures against policies.
• ISO27001 expertise; familiarity with TISAX, CMMC and related frameworks.

Responsabilidades

• Serve as SME for EU and North American security compliance and regulatory mandates.
• Bridge EU/NA business units with technical teams to meet regional requirements.
• Translate global security policies into day-to-day procedures locally.
• Conduct regional risk assessments across business workflows and technical deployments.
• Manage third-party risk assessments using external security posture monitoring.
• Coordinate ICT resilience and cyber crisis management for regional readiness.
• Promote global security awareness across EU and NA entities.

Conocimientos

Information Security

GRC

Compliance

IT Audit

Risk Management

Educación

CISM Certification

CISA Certification

CRISC Certification

CIPP/E Certification

Herramientas

ISO27001

TISAX

CMMC

NIST CSF

Descripción del empleo

BizLink is a global provider of connectivity solutions in the field of data and energy management. We provide solutions for industries following global megatrends such as electromobility, industrial automation, medical technology and data centers with cables and cable systems.

With flat hierarchies, short decision-making processes and a corporate culture based on entrepreneurial thinking and acting, we rely on bright and courageous people with whom we can actively shape the future.

Join us.

For our location in Roth, Germany

Your Tasks

• Regional Compliance & Governance: Serve as the subject matter expert for EU and North American security compliance. Ensure regional entities meet regional regulatory mandates (e.g., NIS2, TISAX, ITAR, CMMC).
• Business & Technical Bridging: Act as the liaison between EU/NA business units and technical teams. Ensure that regional business and external compliance requirements are clearly understood and met by technical execution.
• Policy Implementation: Work locally with IT and business stakeholders to ensure that overarching global security policies and technical standards are translated into compliant, day-to-day procedures.
• Risk Assessment: Conduct regional risk assessments across both business workflows and technical deployments in the EU and North America, ensuring risks are documented and addressed.
• Vendor & Supply Chain Risk: Manage third-party risk assessments for regional vendors, utilizing SecurityScorecard to monitor the external security posture of partners and suppliers.
• Cyber Crisis & Resilience Support: Act as the regional coordinator for ICT resilience and cyber crisis management, supporting the Director in ensuring local readiness and business continuity.
• Security Culture: Champion the global security awareness program within the EU and North American entities, tailoring communication to fit regional business cultures.

Your Talents

• Experience: 5 years in Information Security, specifically within GRC, compliance, IT audit, or risk management functions.
• Regional Expertise: Strong knowledge of the EU regulatory landscape and North American compliance requirements.
• Skills: Excellent communication and stakeholder management skills. Must be highly capable of auditing technical procedures against written policies.
• Frameworks: Strong knowledge of ISO27001. Knowledge of TISAX, CMMC, and other applicable frameworks is a plus.
• Certifications: Certifications such as CISM, CISA, CRISC, or regional compliance/privacy certifications (e.g., CIPP/E) are highly preferred.

Our Offer

• Assignments with room for creativity in a motivated team
• Continuing training opportunities and career prospects within a highly successful and international group of companies
• Supportive working environment with short decision-making processes, flat hierarchies, and company events
• Attractive remuneration, incl. employer contribution to a company pension scheme or AVWL
• 30 days of holiday plus additional paid leave for specific occasions
• Health promotion with modern and ergonomic workplaces