Information Security Officer - ISO (m/f/d)

at  Thinkproject Holding GmbH

• Bucharest (RO)
• Fulltime
  Want to work in a culture built on mutual trust and respect? How about having the freedom to make work fit into your life (and not the other way round)? A career with Thinkproject could be just the opportunity you’re looking for.

SECURITY-RELEVANT RESPONSIBILITIES

• Contact person for employees for information security relevant questions and aspects
• Introducing new employees to information security and data privacy.
• Regular performance or update of the Risk Analysis. Mandatory at least once a year or when revising the risk assessment.
• Identification of threats and vulnerabilities for identified corporate assets.
• Performing supplier audits on a regular basis.
• Provide and maintain an Emergency Plan and Disaster Recovery Plan (Business Continuity Management BCM)
• If personal data is involved all activities must be agreed or coordinated with the Data Protection Officer DPO

ORGANIZATIONAL RESPONSIBILITIES

• You implement all Multi-Scope ISMS requirements at the location and for the products
• 
  
  
  
• Ensure awareness and understanding of ISMS requirements, with regular reviews and documentation of Group requirements for feasibility

• Provision and maintenance of all required ISMS documentation
• Delivery of subject-specific and department-specific training and education for employees
• Management of incidents and risks in accordance with Thinkproject’s ISMS
• You organize internal ISMS audits in line with the Group-wide ISMS audit plan
• You participate in internal ISMS audits, including sampling and reviewing to ensure compliance with information security requirements across all departments
• You ensure ISMS awareness activities, such as tpAcademy trainings and policy confirmations, are completed before each external audit
• You regularly review all organizational and technical measures for effectiveness and legal compliance, considering Group requirements where necessary
• You address audit non-conformities, risks, and incidents promptly and effectively, ensuring corresponding records are maintained
• You ensure proper documentation and record-keeping using systems provided and approved by the company
• Product/Project specific Responsibilities
• You are involved in product-related processes, especially in Software Development, Software Operation, Product Management, and Project Management, driving and coordinating information security tasks at your location
• You escalate open issues as needed and coordinate cross-location aspects with the Group ISO
• You participate in negotiating Supplier Agreements, Data Processing Agreements (DPA), and finalize Non-Disclosure Agreements (NDA)

WHAT YOU NEED TO FULFILL THE ROLE

• 1-2 years of experience in Information Security (ISO) and/or GDPR compliance
• Previous work experience in international companies, with an understanding of global practices and regulations
• Certification in ISO standards (e.g., ISO 27001 or similar) is a plus
• Strong collaboration skills and the ability to work effectively with the Romanian team in establishing this new location
• Proficiency in English, both written and spoken, German language skills are a plus