Consultant Informationssicherheit / IT-Risikomanagement – ISO 27001 (m/w/d)

Contract type
Ongoing
Work mode
Remote · Germany
Experience
Senior · 5+ years

Job description

An information security and IT risk management consultant working in client projects for large enterprises, supporting ongoing ISMS and risk processes.

At a glance

Employment
Full-time · Employee (employment agreement)
Work mode
Remote · Germany
Languages
German – C1

What you'll do

  • Conduct IT risk analyses and risk assessments for applications and infrastructure
  • Create threat analyses and derive measures from them
  • Assess and document risks and track them with the responsible parties
  • Support the ISMS process according to ISO 27001 and ISO 27005
  • Coordinate with business units, IT operations and security officers

What we're looking for

  • At least five years of experience in information security
  • At least three years of practical experience in IT risk management
  • Confident handling of ISO 27001 and ISO 27005 requirements
  • Experience with threat analyses
  • German at C1 level or better

Nice to have

  • Audit or assessment experience
  • Risk management tools, for example risk2value
  • Certification such as ISO 27001 Lead Auditor, BSI-Grundschutz-Praktiker or -Auditor, CISSP or T.I.S.P.
  • Experience in the environment of railway or transport companies

Benefits

  • Predominantly remote, plus an office if you like
  • MacBook (unless the client provides their own hardware)
  • Various clients, various projects
  • The founders are your direct contacts

How to get hired

  1. 1A CV is enough, no cover letter needed
  2. 2They respond within a few days

Apply

About Rockstardevelopers GmbH

Software and IT service provider with experience from hundreds of projects for enterprise and mid-sized clients

Founded in 2015 in Mannheim, with further offices in Stuttgart and Munich.

Key facts

  • 2015
  • Mannheim, Germany
  • Further offices in Stuttgart and Munich
  • Short paths, honest feedback, no political games
  • No hierarchy levels between you and the decision-makers

What they value

  • Short paths, honest feedback, no political games
  • No hierarchy levels between you and the people who make decisions