Information Security Manager at NVISO enhancing clients' cybersecurity posture through strategic management and consulting. Collaborating closely with clients and leading a team of CISOaaS/GRC consultants.
Responsibilities
Lead and manage a team of CISOaaS/GRC consultants to deliver high-quality services to clients
Collaborate closely with clients to understand their business objectives, risks, and specific security requirements
Assess clients' security maturity (using ISO, BSI or NIST standards) to identify gaps and areas for improvement
Develop and implement a fit-for-purpose security program aligned with industry standards
Act as the security champion for client engagements, promoting a security-first mindset
Oversee and support implementation of the security program, including policies, procedures, and controls
Provide management updates on the overall ‘state of security’ for client organizations
Convene steering committees with relevant stakeholders to guide and adapt the security program as needed
Actively participate in the sales process by drafting and presenting Statements of Work, project plans, and project requirements for work carried out by your team
Perform technical account management duties for select top-tier, strategic clients
Requirements
Eligible for NATO clearance
Bachelor’s degree in Business Administration, Information Security, or a related field
Professional certifications such as CISA, CISSP, CISM, ISO 27001 Implementer/Auditor or equivalent are strongly preferred
Proven experience as a CISO and/or in successfully implementing ISO 27000 series or BSI IT-Grundschutz for clients
In-depth knowledge of relevant industry standards and frameworks, such as ISO 27001, DORA, NIST, NIS-2, GDPR, etc.
Familiarity with risk management methodologies and their application to cybersecurity
Excellent written and verbal communication skills in English and German to convey complex concepts to technical and non-technical stakeholders
Strong leadership skills with experience managing teams and collaborating with clients and cross-functional teams
Benefits
Training budget of €10,000 plus 10 days of paid development leave (rolling over two years)
Work with and learn from leading experts in the European cyber security community
Several SANS instructors on staff and representation at major security conferences (Black Hat, BruCON, OWASP, etc.)
Detection Engineer at PayPal focused on building high - fidelity detections to improve security response effectiveness. Collaborating with internal teams to enhance cyber threat management and visibility.
Specialist in industrial safety providing operational support and compliance management for healthcare facilities. Collaborating on inspections, audits, and database management in a regulated industrial environment.
Quality and food safety intern at Nestlé in Dieppe, focused on quality standards and improvements. Undertaking training, development and hands - on experience in food safety and quality culture.
Principal Software Engineer II at Snowflake, leading Product Security initiatives and shaping security strategy. Drive technical vision and collaboration across teams to protect enterprise architecture.
(Sr.) Revenue Operations Manager at Upwind, supporting sales operations and process improvement. Focused on systems thinking and operational excellence within a high - growth startup environment.
Enterprise Account Executive at Upwind Security focusing on cloud security solutions. Driving enterprise sales and building relationships with customers in the Midwest region.
Senior Data Scientist leading high - impact AI projects in national security and AI safety. Empowering to shape technical direction while mentoring and ensuring high - quality delivery.
Senior Machine Learning Engineer leading development of AI systems for diverse clients in national security. Collaborating with teams to design, build, and deploy scalable ML solutions.
Specialized Sales Executive responsible for sales strategy and market presence in Cybersecurity Services. Focusing on tailored solutions and key client engagements in a digital transformation company.