About the job

Overview

NVISO is seeking an Information Security Manager (m/w/d) located in Germany to lead our CISOaaS/GRC consultants and contribute to client projects as well as pre-sales activities for strategic clients. The role aims to enhance clients’ cybersecurity posture by creating and driving security strategies and programs throughout their organizations.

Responsibilities

Key responsibilities and requirements are detailed below.

Leading and managing a team of CISOaaS/GRC consultants to deliver high-quality services to clients

Collaborating with clients to understand their business objectives, risks, and security requirements

Assessing clients’ security maturity (using ISO, BSI or NIST standards) to identify gaps and improvement areas

Developing and implementing a fit-for-purpose security program aligned with industry standards

Driving the security program at clients, acting as the security champion and promoting security awareness

Conducting risk assessments, identifying vulnerabilities, and recommending risk mitigation strategies

Overseeing and supporting the implementation of the security program, including policies, procedures, and controls

Providing updates to management on the state of security at their company

Holding steering committees with relevant stakeholders to guide and adapt the security program when needed

Actively contributing to the sales process by creating and presenting Statements of Work, project plans, and requirements definitions for projects in your team

Performing technical account management duties for specific top-tier, strategic clients

Requirements

You are eligible for NATO Clearance.

Bachelor’s degree in Business Administration, Information Security, or a related field

Professional certifications such as CISA, CISSP, CISM, ISO27001 Implementer/Auditor or equivalent are strongly preferred

Proven experience as a CISO and/or implementing ISO27001/BSI Grundschutz at clients (risk assessment, security