Information Security Manager (f/m/d)

• Eschborn
  
• Full time
• Unlimited

What can you expect with us?

• Further development and operation of the group-wide ISMS based on ISO 27001 and in compliance with other regulatory requirements (e.g., policies, risk management, audits)
• Further development and implementation of processes and procedures to manage, control, maintain and continuously improve information security and meet regulatory compliance
• Managing and enhancing the Group-wide GRC platform in line with internal standards and regulatory requirements
• Supporting organization in applying the ISRM process, including onboarding, training and ongoing improvements
• Overseeing security risk assessments and ensuring consistent tracking, documentation and reporting
• Refining risk methodologies and promoting integration into business and IT processes
• Collaborating with Information Security Managers to improve risk management practices
• Contributing to the development and promotion of awareness initiatives related to security risk and compliance
• Supporting the operation and content lifecycle of the group-wide awareness platform
• Assisting in the rollout of phishing and awareness campaigns to strengthen information security culture

What do you bring to the table?

• Completed studies in business informatics, computer science, information security or comparable work experience
• At least 3 years of practical experience in Information Security Risk Management, ideally in a multi-entity or international setting
• Understanding of security governance frameworks (e.g., ISO 27001, NIS2, COBIT) and related risk assessment methodologies
• Experience with GRC or ISRM platforms is a strong advantage
• Knowledge or interest in security awareness and training approaches is desirable
• Relevant certifications (e.g., CRISC, CISSP, ISO 27005, CISM) are a plus
• Motivation to drive improvements and foster a proactive security mindset across stakeholders
• Strong interpersonal and communication skills; ability to interact with both technical and business audiences
• Advanced proficiency in English and German (spoken and written); additional languages are an asset

What do we bring to the table?

Interested?

Who are we?

GLS Germany on Social Media

Follow our social media channels for exciting news and updates.