Information Security & Compliance Manager

newboxes

. Operate and further develop the ISMS in accordance with ISO 27001, including risk management, policies, and audits .

Posted 10/3/2026full-timeMunich • GermanyMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in operating and developing Information Security Management Systems (ISMS) in compliance with ISO 27001, alongside a solid understanding of GDPR requirements and cloud security practices. Proficient in translating security requirements into actionable IT strategies while collaborating effectively with interdisciplinary teams.

Highest-signal resume keywords

ISMS DevelopmentISO 27001 ComplianceGDPR ImplementationCloud Security PracticesStrong Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementData Protection Impact AssessmentsData Classification ConceptsAccess ManagementEncryptionLoggingAudit PreparationSecurity AssessmentsSupplier AuditsIT Security Requirements Translation

Soft Skills

Meticulous ApproachStructured Work StyleStrong Drive for Completion

Tools & Technologies

Master.ing Cloud-Native Platform

Certifications & Qualifications

ISO 27001 CertificationCISMCISSPCIPP/E

Industry Keywords

Information SecurityComplianceNIS2Cyber Resilience ActBSI C5Export ControlsSecurity Classification Requirements

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Operate and further develop the ISMS in accordance with ISO 27001, including risk management, policies, and audits
Prepare for additional certifications, such as BSI C5
Implement data protection requirements under the GDPR, including the records of processing activities, data protection impact assessments, and data processing agreements
Establish and implement data classification and protection concepts
Respond to customer security assessments and supplier audits
Translate requirements into concrete IT security requirements for architecture and development
Plan, prioritize, and track implementation across the team
Collaborate with interdisciplinary teams in Germany and India
Help shape security and compliance for the master.ing cloud-native platform from the ground up

Requirements

What you’ll need

University degree or comparable vocational training with professional experience in information security, compliance, or IT
Initial experience with ISMS, ISO 27001, or audits, ideally in a software, industrial, or consulting environment
Basic understanding of the GDPR and cloud security, such as access management, encryption, and logging
Willingness to quickly familiarize yourself with new topics such as NIS2, the Cyber Resilience Act, BSI C5, and emerging legal requirements for AI systems
Meticulous, structured approach to work and a strong drive to see initiatives through to completion
Strong communication skills when working with developers and customers’ CISOs
Fluent German and good English
Desirable: ISO 27001 certification (Lead Implementer/Auditor), CISM, CISSP, or CIPP/E; knowledge of export controls and security classification requirements

Benefits

Comp & perks

Challenging environment within a growing company
High level of autonomy and responsibility
Clear career development opportunities
Collaboration with experienced industry experts
Modern working environment with an international outlook
Hybrid work model (project-based on-site work plus remote work)