Information Security Manager (w/m/d)

About the Position

Information Security Manager (w/m/d)

JTL-Software operates e-commerce software that our customers rely on to run their businesses. Customers, partners, and stakeholders trust in JTL to secure their information. We are looking for an Information Security Manager to oversee JTL's information security management system, ensuring compliance with ISO/IEC 27001:2022 and managing cyber risk.

Responsibilities

ISMS Ownership

• Run and maintain the ISO/IEC 27001:2022 management system: scope, Statement of Applicability, control ownership, management review
• Prepare for and defend certification, surveillance, and recertification audits
• Keep the evidence base current and collectible, and make it repeatable rather than a scramble before each audit

Internal Audit

• Plan and run the internal audit programme against the control set
• Write findings that are specific enough to act on, and drive them to closure with the control owners
• Provide factual assurance to the management team

Policy and Standards

• Own the policy and standard framework: authorship, review cycle, approval, publication, versioning

Risk Management

• Run the cyber risk register: assessment, treatment plans, acceptance decisions, review cadence

External Assurance

• Act as the single point of contact for customer security assessments, questionnaires, and due diligence
• Run the response cycle for our investor's portfolio-wide cyber assessment
• Manage third-party and vendor security assessments, and the security half of the vendor onboarding process

Awareness and Training

• Design and run the security awareness programme, including role-based training
• Measure whether it changed anything, and change it when it did not

Requirements

• You have personally owned an ISO/IEC 27001 ISMS and defended it in front of an external auditor, through certification, recertification, or surveillance. Only advising or having provided implementation guidance is not enough for this role.
• You have planned and run internal audits, written the findings, and driven them to closure
• You have written a policy and control framework and then operated an ISMS on it for at least a year
• You have run a risk register where real treatment and acceptance decisions were made
• Technical literacy to look at control evidence from an engineer and tell whether it proves the control
• Fluent English, written and spoken

We Offer

• Remote-first within Germany, with the option to work remotely from eligible countries for up to 180 days per year
• Meal allowance of up to €115 net per month
• Ergonomic workspace allowance for your home office setup
• Regular team events, company-wide gatherings, and summer and Christmas parties to stay connected as a remote-first company
• EGYM Wellpass and JobRad subsidy
• Financial benefits including capital-forming payments (Vermögenswirksame Leistungen) and a company pension scheme

About the Company

JTL-Software runs e-commerce software that our customers run their businesses on. Customers, partners, and stakeholders trust in JTL to secure their information.

We Look Forward to Your Application!

A detailed application would be great, but to start we are also happy to receive:

• Your CV
• Your salary expectations
• Your earliest start date

Do you still have questions?

Your contact at JTL:

Steffi Meiritz

[email protected]

Feel free to reach out to Steffi with any questions about the role or the application process.