Information Security Manager

Information Security Manager

Hamburg | Onsite 3 days per week | German speaking preferred

We are supporting an international organisation in its search for an Information Security Manager to strengthen its global security governance, risk management and compliance programme.

Working closely with the CISO and stakeholders across IT, Legal, Data Protection, Risk, Audit and the wider business, you will help shape the security strategy and drive the continuous improvement of the global Information Security Management System (ISMS).

Your responsibilities:

• Translate requirements from KRITIS, NIS2, TISAX, ISO 27001, NIST and GDPR into practical business requirements and security controls.
• Develop and maintain information security policies, standards and controls alongside technical and business teams.
• Oversee the global ISMS, monitor its effectiveness and identify opportunities for improvement.
• Coordinate external audits and certifications, working closely with auditors and certification bodies.
• Deliver security awareness and training initiatives that encourage secure behaviour across the organisation.
• Define and report meaningful security metrics to senior management.
• Monitor emerging threats, regulatory developments and industry trends to recommend practical improvements.
• Develop and implement the global information and cyber security risk management strategy and roadmap.

Your profile:

• Extensive experience in information security, with a strong focus on ISMS, governance, risk and compliance.
• A sound understanding of relevant security standards and regulatory frameworks.
• The ability to translate complex requirements into clear, achievable actions.
• Strong communication and stakeholder management skills, with confidence engaging senior leadership.