ISMS Specialist: Security Assurance & Compliance

JTL-Software GmbH; United States; Remote; USD 134,000 - 202,000; Full time

Benefits offered by this job

Remote-first in Germany

Meal allowance

Home office setup support

Team events

Job summary

JTL-Software GmbH is seeking an experienced ISMS lead to own and defend ISO/IEC 27001:2022 across the organization. The role focuses on audits, policy development, risk management, and security awareness in a remote-first structure.

You will coordinate with security teams to maintain compliance, manage the risk register, and act as the primary contact for security assessments and due diligence from customers and investors. English fluency is required.

Qualifications

• You have personally owned an ISO/IEC 27001 ISMS and defended it before an external auditor.
• You have planned and run internal audits and driven findings to closure.
• You have written policy and control frameworks and operated an ISMS for at least one year.
• You have run a risk register with real treatment and acceptance decisions.
• You are fluent in English, written and spoken.

Responsibilities

• Run and maintain the ISO/IEC 27001:2022 ISMS: scope, Statement of Applicability, control ownership, management review.
• Prepare for and defend certification, surveillance and recertification audits.
• Keep the evidence base current and repeatable for audits.
• Plan and run internal audits against the control set.
• Write findings that are specific and drive closure with control owners.
• Own the policy and standard framework: authorship, review, publication, versioning.
• Run the cyber risk register: assessment, treatment plans, acceptance decisions.
• Act as single point of contact for customer security assessments and due diligence.
• Design and run the security awareness programme, including role-based training.

Skills

ISO27001 ownership

Internal audits

Policy framework

Risk management

Technical controls

Fluent English

Job description

JTL-Software GmbH is seeking an experienced ISMS lead to own and defend ISO/IEC 27001:2022 across the organization. The role focuses on audits, policy development, risk management, and security awareness in a remote-first structure.

You will coordinate with security teams to maintain compliance, manage the risk register, and act as the primary contact for security assessments and due diligence from customers and investors. English fluency is required.