Consultant IT Compliance & Information Security (m/f/d)

[Location / Remote] · IT Compliance / Information Security

Consultant IT Compliance & Information Security (m/f/d), Start: September 2026. Project language: German.

For a client project, we are looking for an experienced Consultant (m/f/d) who will work with one of Germany's major statutory health insurance companies to develop the compliance foundations for a new development and operating platform, from processes and procedural instructions to technical platform requirements.

New Monday is a digital agency from Berlin that works 100% remotely. Our clients include renowned corporations such as Atruvia, DAK, SAP, Lufthansa, and many more, as well as modern startups like NUMA Stays.

About the Project: The client's core system maps all core processes relevant to social security law and has been in use for over 20 years. It is being fundamentally renewed: the existing monolith is being converted into a more granular, functionally segmented application landscape based on Self-Contained Systems (SCS). A development and operating platform is being created for this, which is expected to be used by around 150 developers from 2027 onwards. Many compliance issues that were previously handled centrally will need to be addressed decentrally by individual teams in the future. Your task: a viable, practical set of processes, procedural instructions, and technical platform requirements, agreed upon with stakeholders, with which the development teams can work efficiently and in compliance.

Responsibilities

• Familiarization and Analysis: Structured overview of the client's existing guidelines and policies relevant to the development, operation, and further development of the new platform.
• Conception of Procedure: Design of a transparent, comprehensible process model for the systematic derivation of the required artifacts (processes, procedural instructions, technical requirements) from the existing guidelines and policies.
• Development of processes and procedural instructions for the operational implementation of compliance requirements by the future application development teams and operations organizations.
• Development of a secure development process that meets the requirements of KRITIS, ISO 27001, and internal guidelines.
• Identification, specification, and documentation of technical requirements for the platform (e.g., logging, monitoring, access and role concepts, interfaces, automation).
• Iterative Coordination and Quality Assurance: Presentation of work results to the owners of the guidelines and policies, as well as project management, collection and evaluation of feedback.
• Revision, refinement, and consolidation of the drafts based on feedback and practical experience from pilot projects or initial implementations.
• Technical support for the introduction in the involved teams (development, operations, possibly other units) and support for integration into their working methods (e.g., agile development, DevOps approaches).

Qualifications

• Completed studies in (Business) Informatics, Information Security, Business Studies with an IT focus, or a comparable qualification (e.g., many years of relevant professional experience in a comparable role).
• At least 5 years of professional experience in IT, of which at least 3 years in one or more of the following areas: IT Service Management (e.g., ITIL), data protection in the IT context, information security.
• Demonstrable experience in the conception and documentation of IT processes, workflow and procedural instructions, or technical platform requirements in complex IT environments. Please describe at least two projects in your application where you were responsible for such tasks.
• Knowledge of requirements from KRITIS and ISO 27001.
• Very good German language skills in speaking and writing (minimum level C1).

Benefits

• Great people, great atmosphere, dynamic team, agile working methods
• Sweet spot between corporate routine and creative agency life: With us, you don't have to juggle hundreds of projects at once, but are assigned to a single project.
• Clearly defined project with a defined duration and predictable workload
• A role with a visible outcome: The processes and requirements developed by you will be the basis of work for around 150 developers from 2027 onwards
• Independent, flexible work without micromanagement

First Introduction You will get to know our way of working and our philosophy. You will have the opportunity to introduce yourself. We will answer all your questions in a relaxed atmosphere.

Technical Interview More in-depth get-to-know-you session focusing on your experience with IT compliance, information security, and process conception, as well as the specific project. Opportunity for mutual questions.

Follow-Up Coordination of details: start date, conditions, and the process at the client's. Then, you can get started right away.

So let's go! We look forward to receiving your application.

To keep things simple, we're happy to skip the cover letter. Just send us your CV or profile, including the two reference projects, even if you feel you don't meet 100% of the requirements.

New Monday actively promotes equal opportunities for all employees. We therefore welcome all applicants, regardless of gender, ethnic, cultural and social origin, age, religion, belief, disability, or sexual orientation. Applicants with severe disabilities will be given preferential treatment in cases of equal suitability, taking into account all circumstances of the individual case.

Find more English Speaking Jobs in Germany on Arbeitnow