Information Security Consultant – IT Risk Management, ISO 27001

RockstarDevelopers GmbH

. Support information security and IT risk management operations in customer projects for large enterprises .

Posted 11/2/2026full-timeFrankfurt • GermanyMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in information security and IT risk management, with a strong focus on ISO 27001 and ISO 27005 compliance. Proficient in conducting risk analyses and threat assessments while effectively collaborating with stakeholders in both English and German.

Highest-signal resume keywords

Information Security ExperienceIT Risk ManagementISO 27001 KnowledgeThreat AnalysisGerman Language Skills (C1 Level)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT Risk AnalysisRisk AssessmentThreat AnalysisISMS Process SupportRisk Management Tools

Soft Skills

Stakeholder CoordinationCollaboration

Tools & Technologies

Risk2Value

Certifications & Qualifications

ISO 27001 Lead AuditorBSI IT-Grundschutz PractitionerCISSPT.I.S.P.

Industry Keywords

Railway IndustryTransportation Industry

About the role

Key responsibilities & impact

Support information security and IT risk management operations in customer projects for large enterprises
Conduct IT risk analyses and risk assessments for applications and infrastructure
Prepare threat analyses and derive appropriate measures
Assess and document risks and follow up with the responsible stakeholders
Support the ISMS process in accordance with ISO 27001 and ISO 27005
Coordinate with business departments, IT operations, and security stakeholders
Work in the customer’s team in German, both in meetings and documentation
Work predominantly remotely; customer appointments are usually in Frankfurt, with occasional on-site days

Requirements

What you’ll need

At least five years of experience in information security
At least three years of practical experience in IT risk management
Strong working knowledge of ISO 27001 and ISO 27005 requirements
Experience conducting threat analyses
German is the project language
German language skills at C1 level or higher
Preferred, but not required: Audit or assessment experience
Preferred, but not required: Experience with risk management tools, such as risk2value
Preferred, but not required: Certifications such as ISO 27001 Lead Auditor, BSI IT-Grundschutz Practitioner or Auditor, CISSP, or T.I.S.P.
Preferred, but not required: Experience in the railway or transportation industry

Benefits

Comp & perks

Predominantly remote work, with office access if desired
MacBook (unless the customer provides its own hardware)
A variety of customers and projects
The founders are your direct contacts
Permanent employment contract