Information Security Officer (m/f/d)

{
  "content_hash": "828e35386c5b3cd03bf37d38d291c271c90d6528ab1f842be667917824071e23",
  "source_hash": "9ec0eb5e6f9e223b605bc00433c89f7d8e2f49aad96abe5e4801d1e89a1274f4",
  "last_changed_at": "2026-05-30T05:56:36.516Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "München",
    "city": null,
    "region": null,
    "country": "München",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T07:58:08.336Z",
  "launch_scope": {
    "reason": "personio_production_catalog",
    "included": true,
    "location": {
      "raw": "München",
      "city": null,
      "region": null,
      "country": "München",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "München"
    ]
  },
  "remote_policy": "hybrid",
  "salary_period": null,
  "workplace_type": "hybrid",
  "salary_currency": null
}

{}

{
  "id": "2493394",
  "name": "Information Security Officer (m/f/d)",
  "office": "München",
  "keywords": [],
  "schedule": "full-time",
  "createdAt": "2026-01-16T10:18:12+00:00",
  "seniority": "experienced",
  "department": "Technology & Product",
  "occupation": "desktop_service_and_support",
  "subcompany": null,
  "employmentType": "permanent",
  "jobDescriptions": [
    {
      "name": "Role Responsibilities: What you will do",
      "value": "<div style=\"text-align:justify;\"><strong><span style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Governance & Compliance</span></strong></div><ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Implement and maintain ISO 27001 and TISAX certifications.</li><li style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Own all compliance-related activities, including but not limited to:<ul style=\"font-family:initial;font-size:initial;\"><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Internal and external audit preparation and coordination.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Maintaining the Statement of Applicability (SoA) and evidence for controls.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Ensuring adherence to regulatory and contractual security requirements.</li></ul></li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Develop and maintain compliance documentation, policies, and procedures.</li></ul><div style=\"text-align:justify;\"><span style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\"><strong>Incident & Continuity Management</strong></span></div><ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Lead security incident response and ensure proper documentation.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Conduct root cause analysis and follow-up on corrective actions.</li><li style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Own the end-to-end BCP process, including but not limited to:<ul style=\"font-family:initial;font-size:initial;\"><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Maintain BCP documentation and ensure readiness through periodic BCP drills and readiness assessments.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Launch BCP in case of major incidents or disruptions.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Coordinate communication with stakeholders during BCP activation.</li></ul></li></ul><strong><span style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Risk Management</span></strong><ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Identify, assess, prioritize, and track security risks.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Monitor timely execution of mitigation plans.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Perform and review threat modelling for critical systems and processes.</li></ul><div style=\"text-align:justify;\"><span style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\"><strong>Security Operations</strong></span></div><ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Oversee data classification and define retention periods.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Support infrastructure hardening and application security initiatives.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Maintain and enhance the security playbook AI model for incident response.</li></ul><div style=\"text-align:justify;\"><span style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\"><strong>Testing & Assurance</strong></span></div><ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Plan and coordinate penetration testing and vulnerability assessments.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Prioritize and follow up on mitigation of PEN test findings.</li></ul><div style=\"text-align:justify;\"><span style=\"font-family:Arial, Helvetica, sans-serif;font-size:15px;\"><strong>Customer & Stakeholder Support</strong></span></div><ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Act as a security and compliance subject matter expert for customer-facing teams.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Respond to security questionnaires and RFPs.</li></ul>"
    },
    {
      "name": "Role Requirements: What you need to succeed",
      "value": "<ul><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Bachelor’s degree in Information Technology, Computer Science, or a related field.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">4 – 6 years work experience in information security, compliance, or IT governance.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Hands-on experience with ISO 27001 implementation and audits.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Ideally, you have experience in TISAX requirements and automotive security standards.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Strong understanding of risk management, threat modelling, and vulnerability management.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Experience with penetration testing tools and methodologies.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Knowledge of infrastructure hardening and application security best practices.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Deep understanding of regulatory frameworks and audit processes.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Experience maintaining compliance documentation and evidence.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Excellent problem-solving and analytical skills.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Strong verbal and written communication skills in English, German is a plus.</li><li style=\"text-align:justify;font-family:Arial, Helvetica, sans-serif;font-size:15px;\">Ability to work in a highly agile, fast-paced environment.</li></ul>"
    },
    {
      "name": "Why idealworks",
      "value": "<ul style=\"border:0px solid;color:rgb(31,31,31);font-size:14px;font-style:normal;font-weight:400;text-transform:none;font-family:Inter, '-apple-system', BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', 'Open Sans', 'system-ui', '-apple-system', 'Segoe UI', Roboto, Ubuntu, Cantarell, 'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji';background-color:rgb(255,255,255);\"><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">At idealworks, you will find an international working environment and become part of an experienced, open team where mutual trust counts. You will feel at home from the very first second!</li><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">Experience a first-hand start-up feeling and flat hierarchies with varied and responsible tasks that you work on independently.</li><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">Look forward to hybrid working model with 30 vacation days per year and various opportunities to balance your free time, family and job.</li><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">For your commitment to helping us achieve our mission, you will not only be rewarded with appreciation, but also with above-average pay including a bonus scheme and an annual personal development budget.</li><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">We offer exciting corporate benefits, an attractive company pension scheme and regular team events.</li><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">Our modern office is easily accessible by public transport, bike and car and offers numerous catering options for relaxed lunch breaks with your team.</li><li style=\"border:0px solid;margin:0px;font-size:15px;text-align:justify;font-family:Arial, Helvetica, sans-serif;\">Driven by our unique corporate culture, the five values \"passion for results\", \"wellbeing\", \"personal growth\", \"trust\" and \"being and acting as one team\" determine our daily actions and cooperation.</li></ul>"
    }
  ],
  "occupationCategory": "it_software",
  "recruitingCategory": "Full Time Employees"
}