Information Security Consultant, commercetools

• 1+ years professional experience and strong affinity to the areas of information security, data protection and IT
• Deep understanding of complex IT environments, IT processes, and systems
• Basic knowledge in information security standards (ex: ISO 27001, BSI Grundschutz, NIST, SOC2)
• Ability and willingness to familiarize yourself with technical and legal topics of information security
• Motivation, flexibility, and an analytical approach
• Fluent English language skills

Desirable

• Ensure information security and data protection in the product organization as well as in the business departments
• Maintain ISMS: security documents, procedures, guidelines, awareness training and measures in the area of data protection and information security
• Support business units in conducting security assessments and other security topics
• Check assets and evaluate risks in relation to our assets
• Work directly with the business units, and different stakeholders to support risk assessment and risk management processes
• Maintain and evolve our security and compliance solution OneTrust
• Support internal and external audits
• Assist our business units to keep our ISMS up to date