Principal Consultant - Information Security (m / f / d)

Xcede; Dortmund; Vor Ort; EUR 60.000 - 85.000; Vollzeit

Zusammenfassung

A specialised consultancy in Information Security is expanding its team in Dortmund, Germany. This role involves delivering practical security and risk projects across multiple regulated industries. Candidates should have several years of experience in information security, a relevant degree, and strong communication skills in both German and English. The position offers an opportunity to work directly with clients to help manage IT risks and meet compliance expectations. Certifications like CISSP or CISM are a plus.

Qualifikationen

• Several years of experience in information security, ideally in consulting or project-based environments.
• Strong understanding of frameworks like ISO 27001, DORA, NIS2.
• Practical experience explaining risks and controls clearly.

Aufgaben

• Lead or support client projects in information security.
• Conduct gap analyses under DORA, NIS2, and ISO 27001.
• Coordinate cyber risk reduction programmes.

Kenntnisse

Information security

IT compliance

Cyber risk

Communication (German)

Communication (English)

Ausbildung

Degree in IT, engineering, business IT or a related field

Jobbeschreibung

A specialised consultancy is expanding its team of Information Security experts. This role is focused on delivering practical, regulatory driven security and risk projects, not high level strategy slides. You’ll work directly with clients across financial services, critical infrastructure and other regulated industries to help them manage IT risks and meet compliance expectations.

Key Responsibilities :

• Lead or support client projects in information security, IT risk and compliance – covering planning, execution and reporting
• Conduct gap analyses and support the implementation of requirements under DORA, NIS2, KRITIS, ISO 27001 or IT‑Grundschutz
• Evaluate business and IT processes from a risk, efficiency and compliance perspective
• Coordinate cyber risk reduction programmes and security governance frameworks
• Help clients integrate security into existing processes and IT landscapes, including areas like IAM, SIEM or third‑party risk
• Translate regulatory and technical requirements into structured, actionable plans
• Build long‑term relationships with clients and contribute to developing internal methods and service offerings

Your Profile :

• Several years of experience in information security, IT compliance or cyber risk – ideally within consulting or project‑based environments
• Degree in IT, engineering, business IT or a related field
• Strong understanding of common frameworks and standards (e.g. ISO 27001, BSI 200‑x, DORA, NIS2)
• Practical experience in analysing complex systems and explaining risks and controls clearly
• Very good communication skills in both German and English
• Certifications such as CISSP, CISM, CISA or ISO 27001 Lead Implementer are a plus, but not a must