Skip to main content
Current language: English
Models of Collaboration
Support for growth strategies, transformations or M&A processes.
Our IT and subject-matter experts have in-depth specialist knowledge in their field.
We provide you with experienced interim managers who take on responsibility.
Customized expert teams for complex projects
Freelance · ExpertHybrid

External Information Security Officer – Information Security Development (m/f/d)

This project has been filled.

You will find similar open projects below. You can also submit your CV without reference to a project.

Key facts

Start
[Start]
Duration
[Duration]
Work mode
Hybrid
Location
Brandenburg
Workload
100 %
Contract type
Freelance · Expert

Project description

A public-sector IT service provider is seeking an experienced external Information Security Officer (ISO) to further develop information security from both a strategic and operational perspective. The role involves providing consulting services, assisting with planning activities, and supporting key security processes.

Responsibilities

  • Serve as the external information security officer and provide the client with expert advice on information security.
  • Plan and evaluate security requirements and measures, and oversee their implementation.
  • Review and supplement existing security documentation and relevant entries in the Verinice ISMS tool.
  • Systematically identify risks and areas requiring action, prioritize them, and prepare reports tailored to the intended audience.
  • Support the client in the further development of security processes and the implementation of regulatory requirements.
  • Document results, recommendations, and pending actions in a transparent manner and coordinate them with relevant contacts.

Requirements

Must-have

These criteria are required for the project.

  • Several years of experience as an information security officer or in a comparable ISMS role.
  • Proof of all of the following qualifications: ISO/IEC 27001 Lead Auditor, NIS2 Expert, ISO 9001:2015 based on DIN EN ISO 19001:2018, Data Protection Officer, audit procedure competence pursuant to Section 8a(3) of the Federal Security Act (BSIG), and Mastering Incident, Risk, and Crisis Manager.
  • In-depth knowledge of information security management, risk management, and relevant regulatory requirements.
  • Willingness to undergo a Level 2 security clearance (Ü2); this is required for appointed personnel and will be applied for after the contract is awarded.
  • Willingness to perform the required services primarily on-site.

Nice-to-have

Not required, but a plus for your application.

  • Experience in the public sector or with IT service providers.
  • Practical experience with ISMS tools, particularly Verinice.
  • Experience in presenting security risks and measures in a way tailored to the target audience.

Skills

  • ISMS
  • ISO 27001
  • NIS2
  • Risikomanagement
  • Informationssicherheit

More projects

No matching project?

Submit your CV without reference to a project, so we know your profile when a matching project comes in.

Submit CV