Job
- Level
- Experienced
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will develop an effective information security management system and implement data protection policies while collaborating with clients and translating security-related requirements into IT security standards.
Job Technologies
Your role in the team
- Operation and further development of our ISMS according to ISO 27001, including risk management, policies, and audits.
- Preparation for further certifications (e.g., BSI C5).
- Operational implementation of data protection in accordance with GDPR (Record of processing activities, Data Protection Impact Assessment, Data Processing Agreement).
- Development and implementation of data classification and protection concepts.
- Responding to security assessments and supplier audits of our clients.
- Translation of requirements into concrete IT security requirements for architecture and development.
- Planning, prioritization, and tracking of implementation within the team.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree or equivalent qualification with professional experience in the field of information security, compliance, or IT.
Qualifications
- Basic understanding of GDPR and cloud security (e.g., access management, encryption, logging).
- Willingness to quickly familiarize yourself with new topics such as NIS2, Cyber Resilience Act, BSI C5, or new legal requirements for AI systems.
- Conscientious, structured work approach and enjoyment in completing tasks.
- Strong communication skills with developers and customer CISOs.
- Fluent German, good English.
- Advantageous: ISO-27001 certification (Lead Implementer/Auditor), CISM, CISSP, or CIPP/E; knowledge of export control and confidentiality protection.
Experience
- Initial experience with ISMS, ISO 27001, or audits, ideally from software, industrial, or consulting environments.
This text has been machine translated. Show original
What we offer
- You build security and compliance for a young platform from the ground up, rather than just managing an existing set of rules.
- You work with clients for whom security is business-critical, and you are directly involved in shaping how a cloud-native industrial platform meets these requirements.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
newboxes GmbH
newboxes GmbH is an advanced company that supports industrial enterprises in complex technical and business decisions. By combining engineering expertise with management consulting, the company creates digital solutions tailored to the needs of the industry. With a focus on digitalization and artificial intelligence, newboxes offers customized systems for decision-making and control.
Description
- Company Type
- Startup
- Working Model
- Hybrid, Onsite
- Industry
- Consulting
Information Security & Compliance Manager
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
