WorkMotion
Rhenus Logistics
Information Security Management (ISM) Specialist (w/m/d)
Automatic translation. Check the original.
What You Can Expect
- Ensuring compliance with legal, regulatory, customer-specific, and internal company requirements in the field of information security (e.g., ISO/IEC 27001, TISAX, KRITIS, NIS2, Cybersecurity in Aviation Security).
- Development, implementation, management, and continuous improvement of corresponding ISMS (Information Security Management Systems).
- Conducting, documenting, and tracking risk analyses.
- Preparation, support, and follow-up of internal and external audits.
- Coordination with internal and external auditors as well as authorities.
- Support in creating and maintaining policies, processes, and documentation in the field of information security.
- Advising specialist departments on security-related topics and compliance requirements.
- Close collaboration with our technical and organizational information security teams as well as other cross-functional departments such as data protection or quality management.
- Monitoring and evaluating new legal requirements and their implementation within the company.
- Support in the post-incident review of security incidents and interruptions of our business continuity, and in the implementation of risk mitigation measures.
What You Bring
- Completed degree in IT, Information Security, Business Informatics, Compliance, IT Law, or a comparable qualification.
- Profound knowledge of relevant norms and standards (e.g., ISO 27001, NIST, BSI, TISAX, KRITIS, NIS2) as well as experience in establishing and operating an ISMS.
- Good knowledge of project management.
- Analytical thinking, structured way of working, high problem-solving competence, and a high degree of personal responsibility.
- Strong communication skills and the ability to collaborate with various stakeholders.
- Very good German and English skills, both written and spoken.
- Several years of professional experience in the field are advantageous.
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CISSP, or comparable are advantageous.
