KPMG Global Solutions Group Europe
Senior Expert:in Organizational Information Security Management (m/w/x)
Vollzeit/Teilzeitmit HomeofficeSenior
Graz, Klagenfurt am Wörthersee, Linz, Salzburg, Wien, Innsbruck
ab 58.000 / Jahr
Neuer Job?Nejo!
Dein persönlicher KI-Karriere-Agent
FIfiskaly
Information Security & Compliance Manager (m/w/x)
Vollzeitmit HomeofficeSenior
Nejo KI-Zusammenfassung
End-to-end ISMS ownership, including ISO 27001 re-certification and risk management for retail tech. 5+ years ISMS or GRC experience required. Continuous learning and certifications.
Deine Match-Analyse
von deinem Karriere-Agenten
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- English (C1)
- 5+ years Information Security, Compliance or GRC experience
- Owned at least one ISO 27001 audit cycle end-to-end
- 5+ years Information Security, Compliance or Risk Management experience
- Track record of building or maturing an ISMS
- Owned at least one ISO 27001 certification audit end-to-end
- Owned at least one ISO 27001 surveillance audit end-to-end
- Owned at least one ISO 27001 re-certification audit end-to-end
- Gap assessment and nonconformity closure experience
- Deep knowledge of ISO 27001 (2022) and its controls
- Working knowledge of ISO 9001
- Working knowledge of GDPR
- Able to navigate NIS2 without hand-holding
- Genuine fluency in SaaS environments
- Genuine fluency in cloud environments
- Understanding of GCP and/or Azure
- Understanding of CI/CD
- Understanding of infrastructure-as-code
- Understanding of modern change management
- Solid understanding of secure SDLC
- Strong risk management foundations
- Ability to present risk to C-level stakeholders
- Hands-on, delivery mindset
- Ability to define and execute tasks
- Excellent communication skills in English (C1)
- Excellent presentation skills in English (C1)
- Based in Vienna or willing to relocate
- Regular on-site presence
- Full presence during audits
- Relevant certifications (ISO 27001 Lead Implementer / Lead Auditor, CISM, CISSP, CISA) are strong pluses
- Experience with modern GRC platforms (e.g. Vanta, Drata) are strong pluses
Aufgaben
- Own the ISMS end-to-end, including scope, policies, controls, risk register, management review, and continuous improvement
- Lead the re-certification process, including assessing current state, closing nonconformities, and planning internal audits
- Prepare management review and audit evidence, and coordinate with the certification body
- Define and build ISMS processes tailored to the company, including business continuity, change management, incident and vulnerability management, and supplier management
- Run the company-wide risk management program, translating abstract risks into actionable tasks
- Explain business risk versus technical risk to leadership
- Report on the state of security and compliance to management
- Provide concrete direction for security and compliance improvements
- Embed security-by-design into the SDLC, CI/CD, and infrastructure-as-code
- Automate evidence collection through continuous monitoring
- Support Legal and Sales with customer due diligence, including security questionnaires and contract reviews
- Participate in enterprise customer audits
- Oversee vendor risk management with scalable assessments
- Maintain the ISO 9001 QMS and GDPR framework
- Monitor the regulatory landscape, including NIS2 and AI Act
- Translate regulatory requirements into practical roadmaps for leadership
- Drive a security-aware culture beyond mandatory training
- Position compliance as a business enabler
Berufserfahrung
5 Jahre
Ausbildung
Bachelor-AbschlussODER
Master-Abschluss
Sprachen
Englisch – verhandlungssicher
Deutsch – Grundkenntnisse
Tools & Technologien
ISO 27001ISO 9001GDPRNIS2GCPAzureCI/CDinfrastructure-as-codeSaaSVantaDrataISO 27001 Lead ImplementerISO 27001 Lead AuditorCISMCISSPCISA
Benefits
Weiterbildungsangebote
- Continuous learning and certifications
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens fiskaly erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei fiskalyÜber das Unternehmen
FI
ITWien
The company provides secure, high-scale fiscal compliance solutions across Europe.
Wie gut ist dein Lebenslauf?
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Du hast noch keinen Lebenslauf?
Noch nicht perfekt?
- BitpandaLead, Information Security (m/w/x)Vollzeitmit HomeofficeSeniorWien, Berlin
- BitpandaSpecialist, Information Security (m/w/x)Vollzeitmit HomeofficeBerufserfahrenWien
- KPMGSenior Expert:in Organizational Information Security Management (m/w/x)Vollzeitmit HomeofficeSeniorLinz, Graz, Klagenfurt am Wörthersee, Salzburg, Wien, Innsbruckab 58.000 / Jahr
- REWE Group ÖsterreichInformation Security Officer (m/w/x)Vollzeitmit HomeofficeSeniorWiener Neudorfab 70.000 / Jahr