Information Security Consultant

blau direkt

. Actively develop and enhance the Information Security Management System (ISMS) in accordance with ISO/IEC 27001 .

Posted 11/5/2026full-timeLübeck • GermanyMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and enhancing Information Security Management Systems (ISMS) in accordance with ISO/IEC 27001, alongside practical experience with Governance, Risk, and Compliance (GRC) systems. Possesses strong analytical skills for performance indicators and the ability to engage stakeholders in fostering a robust security culture.

Highest-signal resume keywords

ISMS DevelopmentISO/IEC 27001 ComplianceSupplier AuditsGRC Systems ExperienceBilingual in German and English

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security Management System (ISMS)ISO/IEC 27001Supplier AuditsRisk AssessmentsCorrective Actions TrackingGovernance, Risk, and Compliance (GRC)Key Performance Indicators AnalysisInternal Control System (ICS)Process Design ComplianceAudit Reporting

Soft Skills

Confident DemeanorDiplomatic CommunicationStakeholder EngagementProblem StructuringCollaboration

Tools & Technologies

GRC SystemsAwareness Platforms

Certifications & Qualifications

Relevant Certifications

Industry Keywords

Information SecurityRegulatory ComplianceProcess OptimizationTraining ActivitiesSecurity Culture

About the role

Key responsibilities & impact

Actively develop and enhance the Information Security Management System (ISMS) in accordance with ISO/IEC 27001
Maintain and update ISMS policies
Integrate new regulatory requirements
Advise business departments on process design in compliance with applicable standards
Independently plan and conduct supplier audits
Prepare detailed audit reports
Prepare audit results for the annual management review
Define and monitor corrective actions
Continuously optimize the GRC system
Contribute to establishing the Internal Control System (ICS)
Strategically plan training activities and provide administrative and content-related support for the awareness platform
Analyze key performance indicators statistically
Capture and map department-specific processes in the GRC system
Provide subject-matter support to Risk Owners during systematic risk analyses
Work with business departments and the CISO to strengthen information security and further develop the security culture

Requirements

What you’ll need

Completed university degree, for example in IT security, computer science, business informatics, or a comparable qualification
Several years of relevant experience developing and enhancing an ISMS in accordance with ISO/IEC 27001
Experience conducting supplier audits, including risk assessments and tracking corrective actions
Relevant certifications are an advantage
Practical experience with GRC systems and awareness platforms
Confident and diplomatic demeanor
Ability to engage diverse stakeholders in developing shared solutions
Ability to independently identify areas requiring action and drive initiatives forward
Willingness to take active ownership and responsibility
Ability to structure complex problems and implement practical solutions
Enjoyment of collaboration and of bringing together different perspectives and teams
Very good command of German and English

Benefits

Comp & perks

Permanent position with an established, forward-looking company
Flexible working time models
Dogs welcome in the office
Corporate benefits discounts
Monthly extra credit through Probonio
Free parking
Electric vehicle charging stations
Covered and secure bicycle parking with charging facilities
Bike leasing
Open and personal company culture
Personalized onboarding
Agile ways of working and the opportunity to actively shape initiatives
After-work events, movie nights, and game nights
Team trips within Germany and abroad
On-site Hansebistro offering hot meals, snacks, and beverages
High-quality coffee from a Lübeck-based coffee roastery
Free fruit and water
Internal and external professional development opportunities