Werkstudent ISMS & Compliance

About the role

Solarize is looking for a student to support the maintenance and development of their ISO/IEC 27001:2022 certified Information Security Management System (ISMS). You will work closely with the engineering team to implement security requirements, manage device fleets, and develop guidelines for the secure use of AI tools. This role offers the opportunity to gain practical experience in information security within a growing SaaS company.

Responsibilities

• Support the implementation and verification of ISO/IEC 27001:2022 requirements in daily operations.
• Maintain policies, evidence, and risk assessments while assisting with internal and external audits.
• Define and track ISMS KPIs using automated dashboards to derive actionable improvements.
• Actively participate in the management of the company's mobile device fleet.
• Develop guidelines and technical guardrails for the productive and secure use of AI tools.
• Collaborate with the engineering team to translate security requirements into practical solutions.

Required skills

• Information Security
• Cloud Infrastructure
• Identity and Access Management
• Python
• Bash
• TypeScript
• Documentation

Nice to have

• ISO 27001
• BSI IT-Grundschutz
• NIS2
• MDM
• Apple Device Administration

Qualifications

• Currently enrolled in Computer Science, Business Informatics, IT Security, Security Management, or a comparable field of study
• Technical understanding of cloud infrastructure, IAM, and end-user devices

Benefits

• Flexible working hours
• Steep learning curve
• Professional development
• Team events

About the Company

Solarize Energy Solutions GmbH is a software company based in Berlin and Stuttgart that provides billing solutions for energy companies, including PPAs, tenant electricity, and heat. The company is dedicated to driving the energy transition through innovative, customer-oriented software products.