Information Security Consultant

• Independently lead consulting projects and take responsibility for clients, deliverables, timelines, and quality
• Advise clients on establishing and developing ISMS and BCMS
• Advise on integrating and implementing regulatory requirements, particularly those arising from the German BSI Act, the KRITIS Umbrella Act, and DORA
• Design risk analyses and risk treatment processes
• Develop metrics, prioritized roadmaps, and other management tools
• Develop concepts and policies for clients in regulated industries in the context of KRITIS, NIS2, and the KRITIS Umbrella Act
• Conduct internal audits
• Prepare and support clients through ISO 27001 and/or TISAX certifications and assessments
• Prepare and conduct business continuity exercises and derive specific improvement measures
• Contribute to internal projects, company-wide knowledge management, and the ongoing development of the consulting approach

• Completed university degree, for example in cybersecurity, computer science, business informatics, business administration, security management, or a comparable qualification
• At least three years of relevant professional experience in information security or IT security consulting
• Ability to independently lead client projects
• Proven experience in project management in the areas of information security, management systems, or governance
• Ideally, experience establishing or developing ISMS and/or BCMS
• Strong knowledge of standards and methodologies in at least one core area: ISO 27001, ISO 22301, or TISAX
• Additional knowledge of DORA, BSI IT-Grundschutz, or ISO 27031 is an advantage
• Confident, audience-appropriate communication with specialist departments, management, and decision-makers
• Ability to independently assume project and client responsibility
• Structured, analytical, and highly organized approach to work
• Fluent German and very good English skills
• French and/or Spanish skills are a plus

• Varied projects for clients of different sizes and across various industries, both nationally and internationally
• Fully remote, digital, and mobile work, with no fixed office days and no rigid core hours
• Freedom to organize your own working day
• Support for relevant professional development and certifications
• Regular feedback and professional exchange
• Performance-based, fair, and transparent compensation
• Corporate benefits
• Company fitness program
• Regular team events