Job
- Level
- Lead
- Location
- Karlsruhe
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will design an integrated management system for security standards, lead audit initiatives, and integrate new regulatory requirements to ensure continuous compliance and security.
Job Technologies
Your role in the team
- As a member of the multinational Security Management Team at IONOS SE, you work for one of the largest European hosting providers in the rapidly growing cloud sector and contribute your knowledge and experience to further enhance the security of our products and system landscape.
- You are responsible for the design and operation of an integrated management system that includes, among other things, certified areas according to ISO 27001, BSI IT-Grundschutz, and BSI C5, and is continuously expanded.
- The goal is to promote and manage the implementation and operation of security mechanisms - not only to demonstrate that our products meet the security requirements of standards but also to increase the value for our customers and the company.
- You bridge the gap from ISO 27001, BSI C5, and IT-Grundschutz to emerging regulatory standards such as NIS2 and KRITIS, ensuring that our products maintain solid compliance while enabling rapid innovation.
- Lead project teams, engineers, and junior security peers technically through certification and audit initiatives.
- Act as the primary technical lead for new and recertification cycles.
- Develop and oversee our unified management system for ISO 27001, BSI IT-Grundschutz, and BSI C5, ensuring lean, synergy-oriented processes across international cloud infrastructures.
- Lead the operational planning, execution, and follow-up of internal and external security audits.
- Guide the company towards continuous compliance through the use of real-time security dashboards and modern GRC tools.
- Align our certification frameworks with evolving regulatory requirements - including NIS2 and KRITIS standards.
- Create, compile, and present security metrics and certification status reports for senior management.
- Support risk management, third-party risk assessments (TPRM), security awareness, and incident management across all product lines.
This text has been machine translated. Show original
Our expectations of you
Education
- Successfully completed studies in Computer Science, Information Security, or comparable practical experience in Cloud/SaaS hosting environments.
Qualifications
- Proven success in leading ISO 27001, BSI C5, or BSI IT-Grundschutz audits effectively.
- Practical familiarity with GDPR, CSA CCM, and new standards (NIS2/KRITIS).
- Proven strength in leading cross-functional projects, mentoring colleagues, and successfully managing diverse stakeholders without direct authority.
- Fluent German and English skills, along with strong analytical and executive reporting capabilities.
Experience
- Experience with modern GRC tools and automated evidence collection to minimize manual effort in reporting.
This text has been machine translated. Show original
What we offer
- Hybrid work model.
- Flexible working hours through trust-based working time.
- At some locations, a subsidized canteen and various free beverages.
- Modern office spaces with excellent transportation links.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous opportunities for further training and development.
- Various health offerings, such as sports and wellness courses.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Food & Drink
Topics You Will Work On
Job Locations
About Your Employer
1&1 Internet AG
With our strong brands 1&1, GMX, WEB.DE and mail.com, we are the leading provider of consumer applications in Germany with over 30 million active users. We make communication even safer - with up to 500 million incoming e-mails per day! With our advanced security facilities, we ensure that your data is always protected. So you can relax and concentrate on the really important things.
Description
- Company Size
- 250+ Employees
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Employer reviews
by devworkplaces.com
Total
(1 Review)3.5
Career Growth
3.4Workingconditions
4.4Engineering
2.7Culture
3.5
Staff Information Security Professional
- Location
- Karlsruhe
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
