Principle Consultant Cyber Sec

Barclay Simpson; Düsseldorf; Remote; EUR 70.000 - 115.000; Vollzeit

Zusammenfassung

A leading security consultancy in Germany is looking for experienced Information Security & GRC Consultants to join their growing team. The role involves leading security transformation programmes across various sectors, including Financial Services and Pharma. Successful candidates will enjoy a competitive salary range of €70,000–€115,000, with additional benefits such as a €10,000 annual training budget. Opportunities to specialise in emerging security domains are available as the company expands, alongside clear promotion pathways.

Leistungen

€10,000 annual training budget

Clear promotion pathways

Dynamic work environment

Qualifikationen

• Background in Information Security, GRC, Cybersecurity Engineering or Technology Risk.
• Experience with ISO 27001, NIS2, DORA, KRITIS, and related frameworks.
• Strong understanding of security governance, controls, and risk management.

Aufgaben

• Lead or support ISO 27001 initiatives including ISMS design and risk treatment.
• Deliver NIS2 readiness programmes and compliance documentation.
• Design and enhance GRC frameworks across various regulations.

Kenntnisse

Information Security

GRC

Cybersecurity Engineering

Risk Management

SOC/SIEM

German (C1-C2)

English (C1-C2)

Jobbeschreibung

Job Specification : Information Security & GRC Consultants

Location : Germany (remote with travelling for client engagements)

Travel : Client engagements across Germany

Hiring Range : Senior Consultant to Principal Consultant

Salary : €70,000–€115,000 + up to €10,000 annual training budget

Overview

A rapidly scaling specialist security consultancy is expanding its permanent team following multiple long‑term project wins across the Financial Services, Pharma, and Defence sectors.

They are seeking experienced Information Security, GRC, and Technical Security professionals to support hands‑on delivery of security transformation programmes.

The consultancy is known for its deep technical expertise, strong client relationships, and commitment to internal development. With the company growing significantly, there are opportunities to specialise in sub‑domains such as SOC, SIEM, OT / ICs Security, DORA, and NIS2.

Key Responsibilities

• Lead or support ISO 27001 initiatives, including ISMS design, gap assessments, risk treatment plans and internal audits.
• Deliver NIS2 readiness programmes (scoping, control design, maturity assessments, compliance documentation).
• Design and enhance GRC frameworks across DORA, KRITIS, BAIT / VAIT / MaRisk.
• Develop and implement policies, procedures, governance structures and operating models.
• Conduct security risk assessments, supplier due diligence and ongoing compliance monitoring.
• Support technical security activities, including remediation and hardening planning.
• Work with engineering teams on delivering practical security improvements across client environments.
• Contribute to SOC and SIEM uplift, use‑case development, threat detection and response improvement.
• Support OT / ICs security initiatives, including architecture reviews, assessments, and control implementation.
• Act as a trusted advisor to IT, Security, Risk, and Audit stakeholders.

Skills & Experience

• Background in Information Security, GRC, Cybersecurity Engineering or Technology Risk.
• Experience with at least one of the following frameworks: ISO 27001, NIS2, DORA, KRITIS, BAIT / VAIT / MaRisk.
• Strong understanding of security governance, controls, and risk management.
• Hands‑on experience in SOC / SIEM, technical security, or OT security is highly advantageous.
• Ability to engage effectively with stakeholders across complex organisations.
• C1-C2 German & English.

What They Offer

• Competitive salary: €70,000–€115,000 depending on level.
• €10,000 annual training and certification budget (SANS, ISO Lead Auditor, CISM, CISSP, OT security courses, etc.).
• Opportunities to specialise in emerging security domains as the company grows.
• Clear promotion pathways to management and senior leadership roles.
• Dynamic, delivery‑focused environment with high‑impact project exposure.