Information Security Manager – ISMS, Risk

SWISS KRONO GROUP

. Develop and continuously improve the global Information Security Management System (ISMS) and ensure consistent application across the organization .

Posted 11/11/2026full-timeBerlin • GermanyMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and enhancing Information Security Management Systems (ISMS) while effectively translating regulatory requirements into actionable security measures. Possesses strong analytical skills and the ability to collaborate with diverse stakeholders in an international environment.

Highest-signal resume keywords

Information Security ManagementISMS DevelopmentRisk ManagementISO/IEC 27001 KnowledgeNIS2 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security Risk ManagementRisk AssessmentGap AssessmentProtection Requirement AssessmentInternal AuditsDocumentationRegulatory ComplianceSupplier Risk ManagementAnalytical SkillsConceptual Skills

Soft Skills

Stakeholder CollaborationImplementation-Oriented MindsetPragmatic ApproachConfidence in CommunicationAnalytical Thinking

Industry Keywords

Information SecurityCyber SecurityBusiness InformaticsEU AI ActInternational Environment

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop and continuously improve the global Information Security Management System (ISMS) and ensure consistent application across the organization
Establish, operate and continuously enhance the information security risk management system, including methodologies, processes and documentation
Plan, facilitate and document information security risk assessments, gap assessments, protection requirement assessments and risk workshops
Support implementation of information security requirements arising from NIS2 by translating regulatory requirements into practical security measures and processes
Support implementation of relevant EU AI Act requirements from an information security and risk management perspective
Conduct and support internal information security audits, identify gaps and improvement opportunities, and follow up on resulting measures
Assess information security risks related to suppliers and business partners with Procurement and internal stakeholders
Support information security reporting to the CISO, including preparation and consolidation of risks, measures, findings and management information
Collaborate with stakeholders across the organization in an international environment

Requirements

What you’ll need

Degree in Information Security, Cyber Security, Computer Science, Business Informatics or a comparable qualification and relevant professional experience
Several years of professional experience in Information Security Management, ISMS, IT/Information Security Risk Management or Security Governance
Practical experience in building, implementing or continuously improving an ISMS, ideally in an international or decentralized organization
Strong practical knowledge of information security risk management, including risk identification, analysis, evaluation, treatment and documentation
Experience in conducting risk assessments, gap assessments, protection requirement assessments and security workshops
Good knowledge of ISO/IEC 27001 and related information security and risk management principles
Knowledge of NIS2 and experience in translating regulatory or compliance requirements into operational security measures
Familiarity with the EU AI Act and its implications for governance, risk and information security is an advantage
Experience with internal information security audits and the management of findings and remediation measures
Knowledge of third-party / supplier information security risk management is highly desirable
Strong analytical and conceptual skills combined with a pragmatic, implementation-oriented mindset
Confidence in working with stakeholders from IT and other business functions
English (B2 or higher); German is a plus

Benefits

Comp & perks

Professional onboarding and close collaboration
Stable international business environment in a market leading Swiss family owned company
Global team collaboration with different stakeholder groups across the globe
Professional and personal development opportunities
E-bike leasing
Pension plans, based on location
Multicultural working environment
Flat hierarchies
Excellent development opportunities