Cyber Security Manager (ISO27001 & ISO42001) (2 year contract)

Zync.; Munich (ND); Hybrid; USD 104,493 - 127,714; Full time

Benefits offered by this job

Competitive salary

Bonuses

Strong work-life balance

Flexible hybrid setup

Job summary

Zync. is seeking a Cyber Security Manager in Munich to lead ISMS and GRC initiatives. This role focuses on ISO27001 and ISO42001 adherence, driving compliance with GDPR and similar regulations while fostering a culture of continuous improvement.

The successful candidate will manage audits, work with internal stakeholders, and enjoy a flexible hybrid working setup, competitive salary, and additional benefits.

Qualifications

• Several years of experience in cybersecurity management.
• Strong understanding of risk management aligned to ISO standards.

Responsibilities

• Build and improve ISMS aligned to ISO27001 and ISO42001.
• Drive compliance including GDPR, NIS2, DORA, EU AI Act.
• Manage audits and maintain the risk and asset register.
• Collaborate with internal teams and external auditors.

Skills

C1+ German language skills

Establishing and improving ISMS (ISO27001 & ISO42001)

Preparing audits

Building GRC processes

Communication with stakeholders

Tools

CISSP or ISO27001 LI/LA certifications

Job description

Cyber Security Manager (ISO27001 & ISO42001) (2 year contract) - €100k - Munich (Hybrid) - 6033

Company: A long-established and highly respected company operating at the intersection of media, digital platforms and technology is continuing to invest in its cybersecurity function. With a strong heritage and a modern, tech-driven approach, they develop and deliver a wide range of digital products, platforms and data-driven services, supporting professionals and businesses with critical information and tools.

They are now looking for a Cyber Security Manager to take ownership of ISMS and GRC topics, with a focus on improving processes, integrating regulations and driving automation.

Responsibilities

• You will build and improve ISMS aligned to ISO27001 and ISO42001, including risk management and governance
• You will drive compliance and regulatory integration (GDPR, NIS2, DORA, EU AI Act), while improving and automating processes (controls, audits, evidence)
• You will manage audits, documentation and policies, while maintaining the risk and asset register
• You will work closely with internal teams and external auditors, supporting broader security and AI governance topics

Required Skills

• You have C1+ German language skills
• You have several years of experience in establishing and improving ISMS (ISO27001 & ISO42001)
• You have experience preparing audits
• You are confident in building GRC processes, documentation and structures
• You are a strong communicator, able to work with senior internal and external stakeholders

Desired Skills

• You have certifications such as CISSP or ISO27001 LI/LA
• You have an interest in automation or RegTech

Company Benefits

• You can join a stable, well-established company with a modern tech focus
• You can work in a small, collaborative cybersecurity team
• You can enjoy a flexible hybrid setup and strong work-life balance
• You can benefit from a competitive package, bonuses and additional perks

CALL TO ACTION

If you have the required skills and want to take ownership of ISMS and GRC topics in a modern, growing environment, then send your CV to [e-mail] for a response.