Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.
CL
Information Security, Compliance & Internal Controls Manager – ISO 27001
Posted 8 hours ago
About the role
- Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Responsibilities
- Build, further develop, and systematically prepare the organization for an ISO/IEC 27001-compliant Information Security Management System (ISMS), as well as for ISO 9001 certification
- Analyze, assess, and implement regulatory requirements, particularly those arising from the NIS2 Directive
- Align with and, where applicable, implement measures based on the BSI IT-Grundschutz standard
- Establish, further develop, and ensure the annual audit of the Internal Control System (IKS) by the external auditor in accordance with PS 951 Type 2 / ISAE 3402
- Maintain and structure compliance and security documentation in Confluence and Jira, including audit-ready structures and workflows
- Work continuously with and advise all teams on the systematic collection and updating of security- and compliance-related information
- Develop, standardize, and optimize processes in information security, compliance, and internal controls
- Prepare for, coordinate, and support internal and external audits, including risk analyses and action-item tracking
Requirements
- 3–6 years of professional experience in information security, IT compliance, or ISMS
- Practical experience with ISO/IEC 27001, including implementation, operation, or auditing
- Strong knowledge of regulatory requirements, such as the NIS2 Directive, GDPR, and IT security requirements
- Experience establishing and maintaining structured documentation and processes
- Knowledge of BSI IT-Grundschutz and/or quality management in accordance with ISO 9001 is a plus
- Experience conducting internal audits or supporting certification processes is advantageous
- Basic technical understanding of cloud and IT architectures
- Proficiency with Confluence and Jira or comparable tools is a plus
- Ability to communicate complex requirements clearly and implement them pragmatically
- Fluency in German and good command of English
Benefits
- 100% remote position with a high degree of scheduling flexibility
- Competitive salary
- Automatic KPI-based salary increases
- Attractive annual bonuses
- 30+ days of paid annual leave
- Fully equipped premium home office setup
- Company (e-)bike
- Supplementary company health insurance
- Additional corporate benefits
- Work in an international environment at one of the world’s leading cloud providers in the SAP ecosystem
- Permanent employment contract
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Specialist strengthening security for Safe Software’s FME data integration platform. Supporting SDLC security, AI governance, vulnerability disclosure, and customer security engagements remotely across Canada.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
Application Security Developer securing Clio’s AI - powered legal technology platform through .NET development, vulnerability remediation, and automated application security tooling. Hybrid Toronto Hub role.
Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.
Senior Cybersecurity Architect designing Zero Trust, IAM, SIEM, and cloud security solutions for Manulife’s financial services business. Supporting enterprise architecture, incident response, and security strategy.