Staff Information Security Professional (f/m/d) (Karlsruhe)

WebHosting; Karlsruhe; Hybrid; EUR 110.000 - 140.000; Vollzeit

Zusammenfassung

IONOS SE, Europe’s leading hosting provider, seeks a Staff Information Security Professional (f/m/d) in Karlsruhe to design and operate an integrated management system spanning ISO 27001, BSI IT-Grundschutz, and BSI C5, while ensuring NIS2/KRITIS compliance.

You will lead cross-functional teams, manage internal and external audits, and report security metrics to executives. Fluent German and English are required; GDPR/CSA CCM experience is expected. Hybrid work in Karlsruhe is offered.

Qualifikationen

• Degree in Computer Science, Information Security, or equivalent practical experience.
• Proven track record leading ISO 27001, BSI C5, or BSI IT-Grundschutz audits.
• Fluent in German and English with strong executive reporting.
• Experience with GDPR, CSA CCM, and emerging standards (NIS2/KRITIS).
• Demonstrated ability to lead cross-functional projects and mentor colleagues.
• Hands-on experience with modern GRC tooling and automated evidence collection.

Aufgaben

• Functional leadership guiding project teams across certification and audit initiatives.
• Architect and maintain the Integrated Management System covering ISO 27001, BSI IT-Grundschutz, and BSI C5.
• Lead planning, execution, and follow-up of security audits and certifications.
• Align certification frameworks with evolving regulatory requirements, including NIS2/KRITIS.
• Design, compile, and present security metrics and status reports to senior management.
• Support risk management, third-party risk assessments, and incident management across product lines.

Kenntnisse

Functional Leadership

Audits

GRC Tools

Compliance Management

Ausbildung

Degree in Computer Science/Information Security

Tools

GRC Tools

Jobbeschreibung

Staff Information Security Professional (f/m/d) (Karlsruhe)

Hybrid Full-time Senior Security

Job Description

About IONOS

At IONOS, we don’t just manage servers – we shape the digital future for more than 6.2 million customers worldwide with our solutions. As Europe’s leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure – from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools.

What drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises. We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit.

Ready for your next step? Become part of IONOS and grow with us.

As a member of the multinational security management team at IONOS SE, you will be working for one of Europe’s largest hosters in the rapidly growing cloud sector, contributing your knowledge and experience to better protect our products and system landscape. You will be responsible for the design and operation of an integrated management system that includes certified areas from ISO 27001, BSI IT-Grundschutz and BSI C5, among others, and is constantly being expanded.

The aim is to encourage and control the implementation and operation of security mechanisms, not only to demonstrate that our products meet the security requirements of the standards, but also to increase the benefits for our customers and the company.

You will bridge ISO 27001, BSI C5, and IT-Grundschutz with emerging regulatory standards like NIS2 and KRITIS, ensuring our products maintain rock-solid compliance while enabling rapid innovation.

Tasks

• Functional Leadership & Steering:Functionally guide project teams, engineers, and junior security peers across certification and audit initiatives. Act as the primary technical lead for new and re-certification cycles.
• Integrated Management System (IMS) Competence:Architect and maintain our unified management system covering ISO 27001, BSI IT-Grundschutz, and BSI C5, ensuring lean, synergy-driven processes across international cloud infrastructures.
• Continuous Compliance & Audit Execution:Lead the operational planning, execution, and follow-up of internal and external security audits. Move the organization toward continuous compliance using real-time security dashboards and modern GRC tooling.
• Regulatory & Certification Alignment:Align our certification frameworks with evolving regulatory requirements, including NIS2 and KRITIS standards.
• Reporting & Executive Interface:Design, compile, and present security metrics and certification status reports to senior management.
• Cross-Disciplinary Risk & Vendor Support:Support risk management, third-party risk assessments (TPRM), security awareness, and incident management disciplines across product lines.
• Background:Degree in Computer Science, Information Security, or equivalent practical experience in cloud/SaaS hosting environments.
• Certification & Framework Expertise:Proven track record in successfully leading ISO 27001, BSI C5, or BSI IT-Grundschutz audits. Hands‑on familiarity with GDPR, CSA CCM, and emerging standards (NIS2/KRITIS).
• Functional Leadership Capability:Demonstrated ability to lead cross‑functional projects, mentor colleagues, and manage diverse stakeholders without direct authority.
• Tooling & Automation Mindset:Experience with modern GRC tools and automated evidence collection, reducing manual reporting overhead.
• Communication Skills:Fluent in German and English with strong analytical and executive reporting capabilities.

Application Note

We value diversity and welcome all applications – regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.