Information Security Manager – ISMS & Risk (m/f/d)

Location: Berlin Hybrid or remote within Germany

The SWISS KRONO Group is one of the world's leading manufacturers of wood-based materials and stands for sustainable and innovative solutions in the fields of interiors, flooring and building materials. Founded in 1966 as a family-owned company, the Group now employs around 5,000 people at eleven production sites in eight countries around the globe.

Our headquarters are located in Lucerne, Switzerland. In our international environment you can develop your personal strengths and advance professionally.

We focus on the best - for our employees and customers. This is how we create wood in top form.

You will play a key role in strengthening our global information security governance.

You will develop and continuously improve our global Information Security Management System (ISMS), establish a structured information security risk management approach and support the organization in translating regulatory and security requirements into sustainable processes.

Working in an international environment, you will collaborate with stakeholders across the organization and support the reporting of information security risks, measures and developments to the GISO.

Our offer:

• Professional onboarding and close collaboration
• Stable international business environment in a market leading Swiss family owned company
• You work within a global team with different stakeholder groups across the globe and act as a trusted partner
• Professional and personal development opportunities
• Personal benefits like e-bike leasing and pension plans, based on location

Your tasks:

• Develop and continuously improve our global Information Security Management System (ISMS) and ensure consistent application across the organization.
• Establish, operate and continuously enhance our information security risk management system, including appropriate methodologies, processes and documentation.
• Plan, facilitate and document information security risk assessments, gap assessments, protection requirement assessments and risk workshops with relevant business and IT stakeholders.
• Support the implementation of information security requirements arising from NIS2, translating regulatory requirements into practical security measures and processes.
• Support the implementation of relevant requirements under the EU AI Act from an information security and risk management perspective.
• Conduct and support internal information security audits, identify gaps and improvement opportunities, and follow up on resulting measures.
• Assess information security risks related to suppliers and other business partners in close cooperation with Procurement and relevant internal stakeholders.
• Support information security reporting to the CISO, including the preparation and consolidation of relevant risks, measures, findings and management information.