Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Hamburg, Lübeck
- Working Model
- Onsite
Job Summary
In this role, you will build and operate the information security management system, implement regulatory requirements, and promote a strong security culture across the organization.
Your role in the team
- Build, develop, and operate the Information Security Management System and support the Safety Management System, taking ownership of its continuous improvement.
- Implement and manage regulatory requirements (e.g., KRITIS, NIS2, IMO), ensuring they are reflected in the organization's security governance.
- Develop, maintain, and continuously improve the full set of information security policies, standards, and procedures, translating complex requirements into clear, actionable documents.
- Own the information security risk management process across the organization and its third-party suppliers and service providers: identify and assess risks, and define, track, and monitor mitigation measures.
- Act as an information security partner for internal departments, advising on governance, risk, and compliance topics and actively promoting a strong security culture across the organization.
- Support audits and internal revisions, ensuring continuous compliance and driving improvements based on findings and evolving requirements.
This text has been machine translated. Show original
Our expectations of you
Education
- Degree in Computer Science, Information Security, or a comparable qualification.
Qualifications
- Technical understanding of IT systems, security architectures, and security solutions, enabling you to assess risks, set requirements for and evaluate the effectiveness of security measures.
- A structured, analytical, and risk-based working approach with a high level of ownership and motivation to drive improvements.
- Confident communicator able to explain governance requirements clearly to IT teams, business stakeholders, management, and external parties, and comfortable collaborating across cultures, time zones, functions, and levels of seniority.
- A proactive team player able to work independently, drive topics forward, and follow up on actions with persistence and professionalism.
- Willingness to travel occasionally or visit vessels as part of global information security activities.
- Fluency in written and spoken English.
- Certifications such as CISM, ISO/IEC 27001 Implementer/Auditor, or ISA/IEC 62443.
- Exposure to audit, compliance, or IT governance activities.
- Grundkenntnisse in maritimen oder Operational Technology (OT)-regulierten Umgebungen und Vertrautheit mit verwandten Rahmenwerken (z. B. IEC 62443, KRITIS).
Experience
- In-depth experience in information security management, with good knowledge of relevant standards and frameworks (e.g., ISO/IEC 27001, NIST CSF).
This text has been machine translated. Show original
What we offer
- A collaborative, international working environment with flat hierarchies.
- Schnelle Entscheidungsfindung und eine starke Ownership-Kultur.
- Viel Raum für Initiative, neue Ideen und persönliches Wachstum.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
EGON OLDENDORFF Management GmbH
Egon Oldendorff Management GmbH, based in Lübeck, is part of the renowned shipping group OLDENDORFF CARRIERS. The company specializes in the management and participation in shipping companies and takes care of the associated rights and obligations. Since its founding in 1996, the firm has been active in the maritime sector.
Description
- Company Type
- Established Company
- Working Model
- Onsite
- Industry
- Industry, Production
Information Security Manager
- Location
- Hamburg, Lübeck
- Working Model
- Onsite
- Diversity
- Open for all genders
- English Only
- English only required
