Information Security Consultant – m/f/d

blau direkt

. Further develop and continuously maintain the Information Security Management System (ISMS) in accordance with ISO/IEC 27001 .

Posted 11/5/2026full-timeLübeck • GermanySeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining Information Security Management Systems (ISMS) in compliance with ISO/IEC 27001, alongside practical experience with Governance, Risk, and Compliance (GRC) systems and awareness platforms. Possesses strong analytical skills for assessing risks and implementing corrective actions while effectively engaging stakeholders.

Highest-signal resume keywords

ISMS DevelopmentISO/IEC 27001 ComplianceSupplier AuditsGRC SystemsBilingual in German and English

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security Management SystemISO/IEC 27001Supplier AuditsRisk AssessmentsCorrective ActionsGRC SystemsAwareness PlatformsStatistical AnalysisProcess MappingInternal Control System

Soft Skills

Confident MannerDiplomatic CommunicationStakeholder EngagementProactive OwnershipProblem Structuring

Industry Keywords

GovernanceRisk ManagementComplianceInformation SecurityAudit Reporting

About the role

Key responsibilities & impact

Further develop and continuously maintain the Information Security Management System (ISMS) in accordance with ISO/IEC 27001
Update ISMS policies and integrate new regulatory requirements
Advise business units on process design in compliance with applicable standards
Independently plan and conduct supplier audits
Prepare detailed audit reports and compile findings for the annual management review
Define and monitor corrective actions
Continuously optimize the GRC system
Support the development of the Internal Control System (ICS)
Plan awareness training strategically and provide administrative and content-related support for the awareness platform
Analyze awareness metrics statistically
Capture and map department-specific processes in the GRC system
Provide subject-matter support to Risk Owners during systematic risk analyses
Collaborate with business units and the CISO to strengthen information security and further develop the security culture

Requirements

What you’ll need

Completed degree, for example in IT security, computer science, business informatics, or a comparable qualification
Several years of relevant experience in developing and maintaining an ISMS in accordance with ISO/IEC 27001
Experience conducting supplier audits, including risk assessments and follow-up on corrective actions
Relevant certifications are a plus
Practical experience with GRC systems and awareness platforms
Confident and diplomatic manner
Ability to engage a range of stakeholders in achieving shared solutions
Ability to independently identify areas requiring action and implement initiatives
Proactive ownership and accountability
Ability to structure complex problems and implement straightforward, effective solutions
Enjoyment of collaboration and bringing together diverse perspectives and teams
Excellent German and English language skills

Benefits

Comp & perks

Permanent position with an established, forward-looking company
Flexible working-hour models
Dogs welcome in the office
Exclusive discounts through Corporate Benefits
Monthly additional allowance via Probonio
Free parking
Electric vehicle charging stations
Covered, secure bicycle parking with charging facilities
Bike leasing
Open and personal company culture
Personalized onboarding
Opportunities to actively shape and drive initiatives forward
After-work events, movie nights, and game nights
Team trips in Germany and abroad
Wide selection of hot meals, snacks, and drinks at the in-house Hansebistro
High-quality coffee
Free fruit and water
Internal and external training opportunities