Information Security, Compliance & Internal Controls Manager – ISO 27001
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Responsibilities:
- Build, further develop, and systematically prepare the organization for an ISO/IEC 27001-compliant Information Security Management System (ISMS), as well as for ISO 9001 certification
- Analyze, assess, and implement regulatory requirements, particularly those arising from the NIS2 Directive
- Align with and, where applicable, implement measures based on the BSI IT-Grundschutz standard
- Establish, further develop, and ensure the annual audit of the Internal Control System (IKS) by the external auditor in accordance with PS 951 Type 2 / ISAE 3402
- Maintain and structure compliance and security documentation in Confluence and Jira, including audit-ready structures and workflows
- Work continuously with and advise all teams on the systematic collection and updating of security- and compliance-related information
- Develop, standardize, and optimize processes in information security, compliance, and internal controls
- Prepare for, coordinate, and support internal and external audits, including risk analyses and action-item tracking
Requirements:
- 3–6 years of professional experience in information security, IT compliance, or ISMS
- Practical experience with ISO/IEC 27001, including implementation, operation, or auditing
- Strong knowledge of regulatory requirements, such as the NIS2 Directive, GDPR, and IT security requirements
- Experience establishing and maintaining structured documentation and processes
- Knowledge of BSI IT-Grundschutz and/or quality management in accordance with ISO 9001 is a plus
- Experience conducting internal audits or supporting certification processes is advantageous
- Basic technical understanding of cloud and IT architectures
- Proficiency with Confluence and Jira or comparable tools is a plus
- Ability to communicate complex requirements clearly and implement them pragmatically
- Fluency in German and good command of English
Benefits:
- 100% remote position with a high degree of scheduling flexibility
- Competitive salary
- Automatic KPI-based salary increases
- Attractive annual bonuses
- 30+ days of paid annual leave
- Fully equipped premium home office setup
- Company (e-)bike
- Supplementary company health insurance
- Additional corporate benefits
- Work in an international environment at one of the world’s leading cloud providers in the SAP ecosystem
- Permanent employment contract
Similar Jobs
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Cybersecurity Director
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.
Senior IT Systems Specialist – IAM & Security – F5 BIG-IP, Keycloak, Nevis
Senior IAM & Security specialist operating F5 BIG-IP, Keycloak and Nevis solutions for a Swiss recruiting agency client. Securing authentication and access to business-critical applications, APIs and portals.
Information Security Compliance Intern
Information Security Compliance Intern supporting audit partner operations at Sprinto, an autonomous trust platform. Building AI-assisted workflows for compliance and evidence mapping.
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.
Senior Security and Compliance Specialist
Senior Security and Compliance Specialist securing Veterans Affairs technology programs. Applying NIST, FISMA, and compliance expertise to support federal digital services and ATO activities.
Information Security Architect – AI
AI Security Architect designing secure frameworks for Cotiviti’s AI systems. Leading threat modeling, testing, compliance, and data protection across the AI lifecycle.
Senior Security Engineer
Senior Security Engineer securing ICT processes and assets at XTB, a global online financial trading company. Managing incidents, vulnerabilities, security tools, threat modeling, and cybersecurity training.
Senior Security Engineer – Red Team
Red-team security engineer conducting penetration tests and threat research for Insider One’s AI-powered marketing and customer engagement platform. Supporting secure development across agile teams.
Group IT Security Manager
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Enterprise AI Security Engineer
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.