Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Berlin
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will evolve the ISMS according to ISO/IEC 27001, conduct risk assessments, and oversee audits while implementing compliance requirements and security measures for systems and vendors.
Job Technologies
Your role in the team
- Responsibility for the development, documentation, and reporting of the ISMS in accordance with ISO/IEC 27001, SOC 2, and TISAX.
- Management and facilitation of audits, compliance requirements, and measures to ensure regulatory and contractual security standards.
- Responsibility for risk analyses, maintaining relevant inventories, as well as assessing and aligning security measures for systems and assets.
- Conducting and documenting supplier evaluations as well as contributing to contractual and organizational security requirements in Third-Party Risk Management.
- Development and implementation of awareness programs, training sessions, and communication measures to strengthen the security culture within the company.
- Support for the DPO in data protection assessments, incidents, inquiries, and the maintenance of data protection-related documentation.
- Participation in AI Governance through the development of policies as well as the risk, security, and compliance assessment of AI-related tools and use cases.
- Participation in Security Incident Response, Business Continuity, and communication with internal and external stakeholders in the event of an incident.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Computer Science, Business Informatics, IT Security, Law with IT focus, or a comparable qualification.
Qualifications
- Good understanding of GDPR and its practical implementation in a corporate context.
- Understanding of technical security concepts (IAM, logging, monitoring, encryption, network security).
- Structured, independent, and quality-oriented working approach with high standards for documentation and traceability.
- Strong communication skills with technical and non-technical stakeholders up to C-Level.
- Fluent in German and English, both written and spoken.
Experience
- Ideally, initial professional experience in information security, preferably in a SaaS, software, or cloud environment.
- Practical experience in the operation or further development of an ISMS according to ISO/IEC 27001 and ideally SOC2.
- Experience in supporting internal or external audits and certifications.
- Experience in conducting risk analyses, security assessments, and supplier audits.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
AMCS Group
At AMCS, we pride ourselves on our innovative platform which is unique on the market and used by thousands of satisfied customers worldwide. It supports best-practice processes and offers end-to-end standardization and optimization of all operations - from automating the fleet to global networking.
Description
- Founding year
- 2004
- Language
- English
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Power Sector, Economy
Information Security Manager
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
