Senior Consultant Information Security creating ISMS solutions and supporting clients in effective IT risk management. Collaborating on projects and ensuring compliance with regulations like NIS-2 and DORA.
Responsibilities
You develop tailored ISMS solutions for our clients
You create policies and practical, implementable security concepts
You implement technical and organizational measures
You lead engaging projects to ensure compliance with new regulatory requirements (e.g., NIS-2, DORA) and prepare our clients for the future
You help our clients detect threats early and establish processes for efficient IT risk management
You conduct business impact analyses
You support our clients in embedding information security as an integral part of their organization
Together we will look for projects that match your interests. You will have a say in which client project you work on.
Requirements
Several years of practical experience in information security
Willingness to take responsibility and make decisions
A strong interest in personal development and continuous learning
Excellent self-organization and efficient work-planning skills
Strong interpersonal and leadership abilities
Experience applying standards and regulatory requirements (e.g., ISO 27001, BSI IT-Grundschutz) and adapting them to individual client needs
Confident use of consulting methods such as time management, project and client management, and quality management (nice to have)
Motivation to actively contribute to the further development of carmasec (nice to have)
In-depth knowledge of regulatory standards and industry frameworks (e.g., NIS-2, DORA, BAIT/VAIT, MaRisk, TISAX, CRA) (nice to have)
Ideally, prior experience in a consulting environment (nice to have)
Benefits
Autonomy: Freedom to experiment, an open culture that accepts mistakes, and the opportunity to help shape company structures
Mentorship: Our experienced colleagues support you in your personal and professional development
Flexible working hours: Work during your most productive times and schedule private commitments flexibly. Overtime is compensated
Additional benefits: Choose from options such as a Germany JobTicket, Urban Sports Club membership, childcare subsidy, or a company bike (JobRad)
Training and certifications: We invest in your development through regular training and recognized certifications
Low travel requirements: We work remotely or from our offices in Cologne or Essen. On-site client meetings are the exception
Team building: Our monthly Open Space is dedicated to creative work on current topics. Regular events (e.g., joint workations, summer party, or Christmas celebration) are planned and organized by the team
Workation: Combine work and travel or take an extended sabbatical
Vacation: 30 days of vacation per year plus special leave for significant occasions
Senior Cyber Security Consultant at Westernacher Solutions in Berlin. Leading digital security consulting and cybersecurity initiatives while mentoring team members.
Senior Cybersecurity Engineer at Vervent delivering security solution designs and managing incident responses while ensuring compliance with industry standards.
Senior Cybersecurity Engineer designing security solutions at Vervent. Collaborating on vulnerability management and incident response for a fintech leader.
Senior Cybersecurity Engineer focusing on security solution design and engineering for fintech company. Engage in vulnerability management, incident response, and threat hunting activities.
Senior Security Developer at CI&T specializing in identity and access management solutions. Leading security evolution of critical platforms in a globally recognized technology firm.
Safety & Security Manager managing security strategies for FIFA's major tournaments and events. Collaborating with stakeholders to ensure optimal security conditions across venues and events.
Information Security Manager leading security operations for Protolabs' digital infrastructure. Overseeing compliance and risk management in a hybrid role based in Maple Plain, MN.
Product Manager focusing on securing product experiences while balancing user needs and compliance. Leading initiatives across agile teams to deliver exceptional customer journeys with robust security standards.
Working Student supporting Tech Security Team in Hamburg. Assisting with IT security incidents and evaluating security - related events in Google Chronicle.