Job
In this role, you are responsible for operating and developing the ISMS according to ISO/IEC 27001, conducting risk analyses, and advising management on information security matters.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You are responsible for operating and further developing our ISMS in accordance with ISO/IEC 27001.
- You conduct risk analyses, assess risks, and oversee the implementation of appropriate measures.
- You create and maintain security policies, processes, and documentation.
- You prepare for and support internal and external audits and certifications.
- You advise executive management, IT, and business departments on all matters relating to information security.
- You regularly report to the executive management on the status of information security.
- You coordinate the management of security incidents and derive lessons learned from them.
- You plan and deliver awareness initiatives and training for employees.
- You monitor regulatory developments (e.g., NIS2) and assess their impact on our company.
Our expectations of you
Education
- A completed degree in computer science, business informatics, IT security, information security, or a comparable qualification.
Qualifications
- In-depth knowledge of ISO/IEC 27001 and basic knowledge of the BSI IT-Grundschutz.
- A good technical understanding of IT infrastructures, applications, and fundamental IT security mechanisms, combined with the ability to consider information security beyond purely technical issues.
- A structured and independent approach to work, and assertiveness.
- Strong communication skills and the ability to explain security topics clearly.
- Very good German and English skills.
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISSP, or IT-Grundschutz Practitioner.
- Knowledge of Jira and Confluence, e.g. for risk management, action tracking, and documentation.
Experience
- Several years of professional experience as an Information Security Officer (m/f/d) or in a comparable role.
- Proven experience managing an ISMS in live operations.
- Experience in risk management and audit support.
- Experience in the initial setup of an ISMS.
What we offer
- We work at the heart of the energy transition—a market that is growing over the long term and is essential to our society.
- With us, you’ll play an active role in shaping tomorrow’s energy infrastructure and help municipal utilities and grid operators combine security of supply with sustainability.
- 30 days of annual leave, flexible working hours, remote work options, and the opportunity to work full-time or part-time.
- Choose between a MacBook, a Windows or Linux computer, and equipment for your home office (e.g. monitor, keyboard, mouse).
- Short decision-making processes, working as equals, an ambitious team, and the opportunity to contribute your own ideas from day one.
- We support you with an ergonomic workspace (height-adjustable desks, ergonomic chairs) and a membership with Hansefit or Urban Sports Club.
- Subsidy for the Deutschlandticket and local public transport.
- Transparent, fair compensation and clear development opportunities.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
retoflow GmbH is an innovative software company based in Kassel that supports network operators and municipal utilities in the digitalization and automation of their network planning. As a spin-off of Fraunhofer IEE and the University of Kassel, the company offers a cloud platform that creates digital twins of energy networks from various data sources. Their solutions enable efficient connection tests, strategic target network planning, and live monitoring for a future-proof energy infrastructure.
- Startup
- Hybrid, Onsite
- Power Sector, Economy
More jobs
These jobs might also interest you
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
