Werkstudent ISMS & Compliance

About the role

Solarize is looking for a student to support the maintenance and development of their ISO/IEC 27001:2022 certified Information Security Management System (ISMS). You will work closely with the engineering team to ensure security compliance, manage device fleets, and develop guidelines for the secure use of AI tools. This role offers the opportunity to gain practical experience in information security within a growing SaaS company.

Responsibilities

• Support the implementation and verification of ISO/IEC 27001:2022 requirements in daily operations.
• Maintain policies, evidence, and risk assessments while assisting with internal and external audits.
• Define and track ISMS KPIs using automated dashboards to derive concrete improvements.
• Actively manage the mobile device fleet, including security policies and configuration profiles.
• Develop guidelines and technical guardrails for the productive and secure use of AI tools.
• Translate security requirements into practical solutions in collaboration with the engineering team.

Required skills

• Information Security
• Cloud Infrastructure
• Identity and Access Management
• Python
• Bash
• TypeScript
• Documentation

Nice to have

• ISO 27001
• BSI IT-Grundschutz
• NIS2
• MDM
• Apple Device Administration

Qualifications

• Currently enrolled in Computer Science, Business Informatics, IT Security, Security Management, or a comparable field of study

Benefits

• Flexible working hours
• Steep learning curve
• Professional development
• Teamevents

About the Company

Solarize Energy Solutions GmbH is a company with offices in Berlin and Stuttgart that provides meter-to-cash software for the energy industry. They support over 200 companies with billing solutions for PPAs, tenant electricity, and heat, focusing on a customer-oriented and innovative approach to the energy transition.