(Senior) Consultant Information Security developing tailored ISMS solutions and security concepts for clients. Engaging in exciting projects to meet new regulatory requirements and manage IT risks.
Responsibilities
You develop tailored ISMS solutions for our clients
You create policies and practical security concepts
You implement technical and organizational measures
You lead exciting projects to comply with new regulatory requirements (e.g., NIS-2, DORA) and prepare our clients for the future
You help our clients detect threats early and establish processes for efficient IT risk management
You conduct Business Impact Analyses
You support our clients in embedding information security as an integral part of their organization
Together we look for projects that match your interests
You have a say in which client project you will work on.
Requirements
Several years of practical experience in information security
Willingness to take responsibility and make decisions
Enthusiasm for personal development and continuous learning
Strong self-organization skills and efficient work planning
Strong interpersonal and leadership skills
Experience applying standards and regulatory requirements (e.g., ISO 27001, BSI IT-Grundschutz) and adapting them to individual client needs
We welcome the following skills from you, otherwise you will learn these aspects during onboarding: confident use of consulting methods such as time management, project and client management, and quality management
Motivation to actively contribute to the further development of carmasec
In-depth knowledge of regulatory standards and industry frameworks (e.g., NIS-2, DORA, BAIT/VAIT, MaRisk, TISAX, CRA)
Ideally, professional experience in a consulting environment.
Benefits
Self-fulfillment: Freedom to experiment, an open error culture, and the opportunity to help shape company structures are part of our culture
Mentorship: Our experienced team members support you in your personal and professional development
Flexible working hours: Work during your most productive times and plan private commitments flexibly. Overtime is compensated
Additional benefits: Choose from offers such as the Germany job ticket (Deutschland-Ticket), Urban Sports Club membership, childcare subsidy, or company bike (JobRad)
Training & certifications: We invest in your development through regular training and recognized certifications
Low travel requirement: We work remotely or from our offices in Cologne or Essen. On-site client meetings are the exception
Team building: Our monthly Open Space is dedicated to creative work on current topics. Regular events (e.g., joint workation, summer party, or Christmas party) are planned and organized by the team
Workation: Combine work and travel or take an extended break as part of a sabbatical
Vacation: 30 days of annual leave and special leave for special occasions
Senior Security Engineer establishing and maintaining cybersecurity measures for a financial services company. Responsible for leading security event responses, documentation of policies, and training.
Senior Corporate Security Investigator at Duke Energy conducting complex investigations in support of Ethics, HR, Legal, Nuclear, and Enterprise Security with field mobility.
AI Enterprise Security Architect focusing on AI Security architectural standards and integrating security measures into AI development lifecycle. Leading a global team in securing AI systems.
Cloud Security Engineer supporting and securing client environments across AWS and hybrid infrastructures. Collaborating with Cloud Operations to monitor, investigate, and remediate security events.
Account Cybersecurity Lead providing cybersecurity governance and oversight at Capgemini. Leading client relationships, security management systems, and risk compliance oversight.
Cybersecurity Risk Coordinator at Globo ensuring operational security across digital content. Analyzing risks and developing strategies to enhance business resilience.
Senior SAP Security Specialist managing SAP Security responsibilities and projects. Collaborating on security tools and conducting workshops in Hamburg.
Sales Account Manager for Cyber Security and Awareness role at HvS - Consulting GmbH. Providing holistic consulting on Cyber Security services and managing client relationships.
Security Engineer at PRC - Saltillo safeguarding IT infrastructure from cyber threats. Collaborating with IT teams to design and maintain security controls in a hybrid work environment.
Information Security Manager leading cyber security initiatives at NVISO, enhancing clients’ security posture and managing a team of consultants in Germany.