Staff Information Security Professional (f/m/d)

1&1 IONOS SE; Berlin; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Hybrid working model

Flexible Arbeitszeiten

Canteen subsidy

Zusammenfassung

IONOS SE in Deutschland sucht eine erfahrene Fachkraft für Security Governance und Zertifizierung. Sie gestalten und betreiben das integrierte Managementsystem (IMS) über ISO 27001, BSI IT-Grundschutz und BSI C5 und arbeiten an der Einhaltung regulatorischer Anforderungen wie NIS2/KRITIS.

Sie führen funktionsübergreifende Teams, berichten direkt an das Management und treiben Audits, Compliance-Dashboards sowie Kundennutzen voran.

Qualifikationen

• Abschluss in Informatik oder Informationssicherheit oder vergleichbare Praxiserfahrung in Cloud-/SaaS-Hosting-Umgebungen.
• Nachweisbare Erfolge in ISO 27001, BSI C5 oder BSI IT-Grundschutz Audits; GDPR, CSA CCM etc. Kenntnisse wünschenswert.
• Führungserfahrung in funktionsübergreifenden Projekten, Mentoring und Stakeholder-Management.
• Erfahrung mit modernen GRC-Tools und automatisierter Beweiserhebung; Reduzierung manueller Reporting-Aufwände.
• Gute Kommunikationsfähigkeiten in Deutsch und Englisch; Berichtswesen auf Vorstandsebene beherrscht.

Aufgaben

• Führung von Projektteams, Engineers und Security-Kollegen über Zertifizierungs- und Auditinitiativen hinweg.
• Architektur und Pflege des integrierten Managementsystems (IMS) über ISO 27001, BSI IT-Grundschutz und BSI C5.
• Leitung Planung, Durchführung und Nachverfolgung interner und externer Sicherheitsaudits; Real-time Dashboards & GRC-Tools.
• Ausrichtung unserer Zertifizierungsrahmenwerke an NIS2/KRITIS; Umsetzung regulatorischer Anforderungen.
• Aufbau von Security-Metriken, Berichten und Executive-Reports für das obere Management.
• Unterstützung Risikomanagement, Third-Party-Risk-Assessment, Awareness-Programme und Incident Management.

Kenntnisse

Leadership

GRC Tools

Audit & Compliance

Kommunikation (DE/EN)

Ausbildung

Abschluss in Informatik/Informationssicherheit

Erfahrung in Cloud/SaaS Hosting

Tools

GRC-Tools

Automation Scripting

Jobbeschreibung

Tasks

As a member of the multinational security management team at IONOS SE, you will be working for one of Europe's largest hosters in the rapidly growing cloud sector, contributing your knowledge and experience to better protect our products and system landscape. You will be responsible for the design and operation of an integrated management system that includes certified areas from ISO 27001, BSI IT-Grundschutz and BSI C5, among others, and is constantly being expanded.
The aim is to encourage and control the implementation and operation of security mechanisms, not only to demonstrate that our products meet the security requirements of the standards, but also to increase the benefits for our customers and the company.
You will bridge ISO 27001, BSI C5, and IT-Grundschutz with emerging regulatory standards like NIS2 and KRITIS, ensuring our products maintain rock-solid compliance while enabling rapid innovation.

Tasks

• Functional Leadership & Steering: Functionally guide project teams, engineers, and junior security peers across certification and audit initiatives. Act as the primary technical lead for new and re-certification cycles.
• Integrated Management System (IMS) Competence: Architect and maintain our unified management system covering ISO 27001, BSI IT-Grundschutz, and BSI C5, ensuring lean, synergy-driven processes across international cloud infrastructures.
• Continuous Compliance & Audit Execution: Lead the operational planning, execution, and follow-up of internal and external security audits. Move the organization toward continuous compliance using real-time security dashboards and modern GRC tooling.
• Regulatory & Certification Alignment: Align our certification frameworks with evolving regulatory requirements, including NIS2 and KRITIS standards.
• Reporting & Executive Interface: Design, compile, and present security metrics and certification status reports to senior management.
• Cross-Disciplinary Risk & Vendor Support: Support risk management, third-party risk assessments (TPRM), security awareness, and incident management disciplines across product lines.

Qualifications

• Background: Degree in Computer Science, Information Security, or equivalent practical experience in cloud/SaaS hosting environments.
• Certification & Framework Expertise: Proven track record in successfully leading ISO 27001, BSI C5, or BSI IT-Grundschutz audits. Hands-on familiarity with GDPR, CSA CCM, and emerging standards (NIS2/KRITIS).
• Functional Leadership Capability: Demonstrated ability to lead cross-functional projects, mentor colleagues, and manage diverse stakeholders without direct authority.
• Tooling & Automation Mindset: Experience with modern GRC tools and automated evidence collection, reducing manual reporting overhead.
• Communication Skills: Fluent in German and English with strong analytical and executive reporting capabilities.

Benefits

• Hybrid working model.
• Flexible working hours through trust-based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.