Information Security Officer (m/f/d)

About the role

We are looking for an Information Security Officer to lead our governance, compliance and security operations. You will ensure ISO 27001 and TISAX certifications, manage incidents and business continuity, and support our customers and stakeholders.

Key responsibilities

• Implement and maintain ISO 27001 and TISAX certifications, prepare for internal and external audits, and manage the Statement of Applicability.
• Lead security incident response, conduct root‑cause analysis, and oversee the end‑to‑end business continuity planning process.
• Identify, assess, prioritize and track security risks, perform threat modelling and monitor mitigation plans.
• Oversee data classification, support infrastructure hardening and application security initiatives, and maintain the security playbook for incident response.
• Plan and coordinate penetration testing and vulnerability assessments, and follow up on remediation of findings.
• Act as a security and compliance subject‑matter expert for customer‑facing teams, responding to security questionnaires and RFPs.

Required profile

• Bachelor’s degree in IT, Computer Science or a related field.
• 4–6 years of experience in information security, compliance or IT governance.
• Hands‑on experience with ISO 27001 implementation and audits; experience with TISAX and automotive security standards is a plus.
• Strong understanding of risk management, threat modelling, vulnerability management and penetration testing methodologies.
• Excellent analytical, problem‑solving and communication skills in English; German is a plus.

Required skills

• ISO 27001 implementation and audit preparation
• TISAX requirements
• Risk management and threat modelling
• Vulnerability management and penetration testing tools
• Infrastructure hardening and application security best practices
• Business continuity planning (BCP) documentation and drills

What we offer

• International, agile work environment with a flat hierarchy
• Hybrid working model
• 30 vacation days per year
• Opportunities for personal and professional growth