Information Security Manager — ISMS & Risk Lead (Hybrid)

NFON AG; Germany (OH); Hybrid; USD 104,000 - 150,000; Full time

Benefits offered by this job

Flexible working hours

Hybrid work (2 days in office)

30 days vacation

Company pension scheme

Workation up to 20 days/year

Sabbatical after 3 years

Tax-free Edenred/Wellpass perks

Mental health support

Job summary

NFON AG is seeking an Information Security Manager to elevate our ISMS and security governance across products and operations. You will drive risk assessment, policy development, and security culture, coordinating with Legal, IT, Privacy, and R&D to embed security into processes.

You’ll lead audits and certifications, monitor threats, and champion ongoing improvements, while working with an international team in a hybrid setup with flexible hours.

Qualifications

• Experience in information security, privacy, cybersecurity, or information security management.
• Solid understanding of security frameworks and standards such as ISO 27001, NIS2, DORA, BSI C5, or comparable frameworks.
• Experience developing and implementing security policies, governance, and risk management processes.
• Knowledge of the German Telecommunications Act (TKG) and the GDPR is an advantage.
• Ability to collaborate effectively with technical and non-technical stakeholders across an international organisation.
• Strong analytical, communication, and stakeholder management skills.
• A proactive, ownership-driven mindset with the ability to build and continuously improve security capabilities.
• Proficiency in German and English.

Responsibilities

• Define, implement, and continuously improve NFON's ISMS and security governance framework.
• Develop and maintain security policies, standards, and procedures aligned with business, regulatory, and customer requirements.
• Conduct security risk assessments and drive mitigation initiatives across products, services, and internal operations.
• Partner with Privacy, R&D, IT Security, Legal, and other stakeholders to embed security into business processes and product development.
• Coordinate internal and external security audits, certifications, and compliance activities.
• Monitor the evolving threat landscape and recommend pragmatic measures to continuously improve NFON's security posture.
• Promote security awareness through training, guidance, and collaboration across the organization.
• Support security incident response activities and drive continuous improvement based on lessons learned.

Skills

Information security experience

Security frameworks

Policies & governance

TKG & GDPR knowledge

Stakeholder collaboration

Analytical communication

Ownership mindset

German & English proficiency

Job description

NFON AG is seeking an Information Security Manager to elevate our ISMS and security governance across products and operations. You will drive risk assessment, policy development, and security culture, coordinating with Legal, IT, Privacy, and R&D to embed security into processes.

You’ll lead audits and certifications, monitor threats, and champion ongoing improvements, while working with an international team in a hybrid setup with flexible hours.