Information Security, Compliance & Internal Controls Manager – ISO 27001

Cloudiax

. Build, further develop, and systematically prepare the organization for an ISO/IEC 27001-compliant Information Security Management System (ISMS), as well as for ISO 9001 certification .

Posted 10/10/2026full-timeRemoteMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining an ISO/IEC 27001-compliant Information Security Management System (ISMS) and aligning with regulatory requirements such as the NIS2 Directive. Proficient in managing compliance documentation and processes while effectively communicating complex requirements.

Highest-signal resume keywords

ISO/IEC 27001 ImplementationNIS2 Directive ComplianceInternal Audit CoordinationConfluence Documentation ManagementJira Workflow Optimization

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security ManagementIT ComplianceRegulatory Requirement AnalysisInternal Control System DevelopmentProcess StandardizationRisk AnalysisISO 9001 KnowledgeGDPR UnderstandingCloud Architecture BasicsIT Security Requirements

Soft Skills

Clear CommunicationAdvisory Skills

Tools & Technologies

ConfluenceJira

Industry Keywords

ISO/IEC 27001NIS2 DirectiveBSI IT-GrundschutzInternal AuditCompliance Documentation

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Build, further develop, and systematically prepare the organization for an ISO/IEC 27001-compliant Information Security Management System (ISMS), as well as for ISO 9001 certification
Analyze, assess, and implement regulatory requirements, particularly those arising from the NIS2 Directive
Align with and, where applicable, implement measures based on the BSI IT-Grundschutz standard
Establish, further develop, and ensure the annual audit of the Internal Control System (IKS) by the external auditor in accordance with PS 951 Type 2 / ISAE 3402
Maintain and structure compliance and security documentation in Confluence and Jira, including audit-ready structures and workflows
Work continuously with and advise all teams on the systematic collection and updating of security- and compliance-related information
Develop, standardize, and optimize processes in information security, compliance, and internal controls
Prepare for, coordinate, and support internal and external audits, including risk analyses and action-item tracking

Requirements

What you’ll need

3–6 years of professional experience in information security, IT compliance, or ISMS
Practical experience with ISO/IEC 27001, including implementation, operation, or auditing
Strong knowledge of regulatory requirements, such as the NIS2 Directive, GDPR, and IT security requirements
Experience establishing and maintaining structured documentation and processes
Knowledge of BSI IT-Grundschutz and/or quality management in accordance with ISO 9001 is a plus
Experience conducting internal audits or supporting certification processes is advantageous
Basic technical understanding of cloud and IT architectures
Proficiency with Confluence and Jira or comparable tools is a plus
Ability to communicate complex requirements clearly and implement them pragmatically
Fluency in German and good command of English

Benefits

Comp & perks

100% remote position with a high degree of scheduling flexibility
Competitive salary
Automatic KPI-based salary increases
Attractive annual bonuses
30+ days of paid annual leave
Fully equipped premium home office setup
Company (e-)bike
Supplementary company health insurance
Additional corporate benefits
Work in an international environment at one of the world’s leading cloud providers in the SAP ecosystem
Permanent employment contract