Staff Information Security Professional

About the role

As a member of the multinational Security Management team, you will design and operate an integrated management system covering ISO 27001, BSI IT-Grundschutz, and BSI C5. You will bridge the gap between these standards and emerging regulations like NIS2 and KRITIS to ensure product compliance while enabling innovation. The role involves leading certification initiatives and driving the company toward continuous compliance using modern GRC tools.

Responsibilities

• Lead project teams, engineers, and junior security peers through certification and audit initiatives.
• Develop and maintain a unified management system for ISO 27001, BSI IT-Grundschutz, and BSI C5.
• Manage the operational planning, execution, and follow-up of internal and external security audits.
• Align certification frameworks with evolving regulatory requirements including NIS2 and KRITIS.
• Prepare and present security metrics and certification status reports for senior management.
• Support risk management, third-party risk assessments, security awareness, and incident management.

Required skills

• IT Security
• ISO 27001
• BSI C5
• BSI IT-Grundschutz
• GRC tools
• Compliance
• Risk Management
• NIS2
• KRITIS

Nice to have

• DSGVO
• CSA CCM

Qualifications

• Degree in Computer Science, Information Security, or equivalent practical experience in Cloud/SaaS hosting environments
• Proven success in leading ISO 27001, BSI C5, or BSI IT-Grundschutz audits
• Experience in cross-functional project leadership and stakeholder management
• Fluent in German and English

Benefits

• Hybrid work model
• Flexible working hours
• Subsidized canteen
• Free beverages
• Modern office space
• Employee discounts
• Company events
• Professional development opportunities
• Health and wellness programs

About the Company

IONOS SE is a leading European hosting provider and pioneer for independent cloud solutions, managing infrastructure for over 6.2 million customers worldwide. The company focuses on digital sovereignty and impact for small, medium, and large enterprises through agile teams and innovative cloud architectures.