(Senior) Consultant for Information Security at carmasec designing tailored ISMS solutions for clients. Support in projects like NIS-2 compliance and strengthening organizational information security.
Responsibilities
You develop tailored ISMS solutions for our clients
You create policies and pragmatic security concepts
You implement technical and organizational measures
You run exciting projects to meet new regulatory requirements (e.g., NIS-2, DORA) and prepare our clients optimally for the future
You help our clients detect threats early and establish processes for efficient IT risk management
You conduct Business Impact Analyses
You support our clients in embedding information security as an integral part of their organization
Together we look for projects that match your interests. You have a say in which client project you will work on.
Requirements
Several years of practical experience in information security
Willingness to take responsibility and make decisions
Enthusiasm for personal development and continuous learning
Strong ability to self-organize and plan work efficiently
Strong social and leadership skills
Experience applying standards and regulatory requirements (e.g., ISO 27001, BSI IT-Grundschutz) and adapting them to individual client needs.
Benefits
Self-fulfillment: Freedom to experiment, an open error culture, and the opportunity to help shape structures within the company are a given.
Mentorship: Our experienced colleagues support you in your personal and professional development.
Flexible working hours: Work during the hours when you are most productive and arrange private commitments flexibly. Overtime is compensated.
Additional benefits: You can choose from a range of offers such as the Germany job ticket (Deutschlandticket), Urban Sports Club membership, childcare subsidy, or a company bike (JobRad).
Training: We invest in your development through regular training and recognized certifications.
Low travel requirements: We work remotely or from our offices in Cologne or Essen. On-site customer meetings are the exception.
Team building: Our monthly Open Space is dedicated to creative work on current topics. Regular events (e.g., joint workations, summer party, or Christmas party) are planned and organized by the team.
Workation: Combine work and travel or take an extended break as part of a sabbatical.
Vacation: 30 days of vacation per year and special leave for exceptional occasions.
Data Center Security Officer ensuring safety and security for data center clients through patrols and monitoring. Conducting reports and maintaining client security requirements.
Cybersecurity Specialist overseeing the protection of clients' technology systems and networks. Implementing cybersecurity policies and conducting evaluations against cyber threats in a supportive working environment.
Providing security incident management for industrial environments at Telefónica Tech. Utilizing various monitoring platforms to enhance security posture.
Information Security Manager responsible for steering InfoSec programs globally at ZEISS. Leading cross - functional initiatives and risk management strategies in a high - tech environment.
Senior Cybersecurity Incident Responder at ZEISS handling technical incident response activities. Collaborating with cyber defense teams to ensure effective incident management and resolution.
Endpoint Security Engineer at Booz Allen designing and operationalizing data protection controls. Safeguarding sensitive data across enterprise systems and leading technical operations.
Senior Security Adviser handling governance and US integration tasks at Boeing. Liaising with US - based partners and coordinating crisis management for international security operations.
Lead Industrial Security Specialist at Boeing assessing compliance with security programs and implementing corrective actions. Involves extensive travel and oversight of security protocols across multiple locations.
Senior Manager of IT overseeing operational security services for Xcel Energy. Leading teams to ensure compliance and effective risk management across enterprise security operations.
IT Security Administrator managing access control and audit evidence across systems at Xcel Energy. Involves training security staff and handling incident investigations.