Principle Consultant Cyber Sec

Barclay Simpson; Leipzig; Remote; EUR 70.000 - 115.000; Vollzeit

Zusammenfassung

A specialist security consultancy is seeking experienced Information Security & GRC Consultants in Germany. The role includes leading ISO 27001 initiatives and delivering NIS2 readiness programmes. Candidates should have a background in cybersecurity and experience with frameworks such as DORA and NIS2. The consultancy offers competitive salaries, a generous training budget of €10,000, and opportunities for growth in emerging security domains. Fluency in German and English is required.

Leistungen

Annual training and certification budget of €10,000

Opportunities to specialise in emerging security domains

Clear promotion pathways to management roles

Qualifikationen

• Background in Information Security, GRC, Cybersecurity Engineering or Technology Risk.
• Experience with frameworks like ISO 27001, NIS2, DORA, etc.
• Strong understanding of security governance, controls, and risk management.

Aufgaben

• Lead or support ISO 27001 initiatives including gap assessments.
• Deliver NIS2 readiness programmes and compliance documentation.
• Design and enhance GRC frameworks across DORA, KRITIS, etc.

Kenntnisse

Information Security

Cybersecurity Engineering

Technology Risk

ISO 27001

NIS2

DORA

C1-C2 German

C1-C2 English

Jobbeschreibung

Job Specification : Information Security & GRC Consultants

Location : Germany (remote with travelling for client engagements)

Travel : Client engagements across Germany

Hiring Range : Senior Consultant to Principal Consultant

Salary : €70,000–€115,000 + up to €10,000 annual training budget

Overview

A rapidly scaling specialist security consultancy is expanding its permanent team following multiple long‑term project wins across the Financial Services, Pharma, and Defence sectors.

They are seeking experienced Information Security, GRC, and Technical Security professionals to support hands‑on delivery of security transformation programmes.

The consultancy is known for its deep technical expertise, strong client relationships, and commitment to internal development. With the company growing significantly, there are opportunities to specialise in sub‑domains such as SOC, SIEM, OT / ICs Security, DORA, and NIS2.

Key Responsibilities

• Lead or support ISO 27001 initiatives, including ISMS design, gap assessments, risk treatment plans and internal audits.
• Deliver NIS2 readiness programmes (scoping, control design, maturity assessments, compliance documentation).
• Design and enhance GRC frameworks across DORA, KRITIS, BAIT / VAIT / MaRisk.
• Develop and implement policies, procedures, governance structures and operating models.
• Conduct security risk assessments, supplier due diligence and ongoing compliance monitoring.
• Support technical security activities, including remediation and hardening planning.
• Work with engineering teams on delivering practical security improvements across client environments.
• Contribute to SOC and SIEM uplift, use‑case development, threat detection and response improvement.
• Support OT / ICs security initiatives, including architecture reviews, assessments, and control implementation.
• Act as a trusted advisor to IT, Security, Risk, and Audit stakeholders.

Skills & Experience

• Background in Information Security, GRC, Cybersecurity Engineering or Technology Risk.
• Experience with at least one of the following frameworks: ISO 27001, NIS2, DORA, KRITIS, BAIT / VAIT / MaRisk.
• Strong understanding of security governance, controls, and risk management.
• Hands‑on experience in SOC / SIEM, technical security, or OT security is highly advantageous.
• Ability to engage effectively with stakeholders across complex organisations.
• C1-C2 German & English.

What They Offer

• Competitive salary: €70,000–€115,000 depending on level.
• €10,000 annual training and certification budget (SANS, ISO Lead Auditor, CISM, CISSP, OT security courses, etc.).
• Opportunities to specialise in emerging security domains as the company grows.
• Clear promotion pathways to management and senior leadership roles.
• Dynamic, delivery‑focused environment with high‑impact project exposure.