Information Security Officer (w/m/d) remote

Security. Enablement. Impact.
We are looking for someone who shapes information security – with strategic foresight, technical depth and enthusiasm for smart implementation.

You know how to make more out of an ISMS than just paper? You think Security as Enabler for Growth and not as a Brake? Then join smapOne, our SaaS-No-Code-Platform with the mission: We enable smarter work.

Aufgaben

What you can expect from us:

• Security Strategy with Impact:
  Responsibility for the comprehensive further development of the security level. The focus is on platform, processes and organization. A Security Roadmap for regulated industries will be steered and regulatory requirements like ISO 27001, C5 or SOC II will be translated into concrete measures.
• ISMS: From Documentation to Effectiveness:
  The existing ISMS will be transformed into an effective control system. Processes, guidelines and controls will be defined, optimized and operationalized in a practical manner.
• Certifications & Audits:
  Audit and certification processes like ISO 27001, C5 or SOC II will be self-responsible. This includes preparation, execution and follow-up of findings.
• Risks Recognize, Measures Steer:
  Risk analyses will be conducted, security measures prioritized and internal and external audits coordinated. The cooperation with auditors and consultants is an integral part.
• Awareness with Relevance:
  A binding Security Awareness Structure for all employees will be built. The goal is high practicality and sustainable further development through target-group-specific training.
• Enablement instead of Control:
  Product and development teams will receive security expertise. In customer and sales situations, know-how will be brought in to strengthen trust and information security.
• Remote-first with Sense for Proximity and Flexibility:
  We will work completely remote, in the office or hybrid, so that it fits best for you. Approximately once a quarter, personal meetings will take place, for example, for team or strategy meetings.

Qualifikation

What you should bring:

• Experience & Know-how:
  Multiple years of professional experience in a role like Information Security Officer or IT-Security Representative. Ideally with active responsibility in ISO 27001 certifications (initial and surveillance audits), the development and further development of an ISMS, as well as experience in project and measure management.

• Regulatory & Architectural Understanding:
  Very good knowledge of ISO/IEC 27001, GDPR and their connection with information security. Experience in dealing with other regulatory requirements like AI Act, Data Act or DSA. A secure understanding of cloud-based software architectures, preferably with Microsoft Azure.

• Certifications & Stakeholder Competence:
  Safe appearance towards external auditors and consultants. Desirable is experience with other attestations like BSI C5 or SOC II as well as compliance requirements for regulated markets.

• Awareness & Enablement:
  Know-how in building and implementing Security Awareness Programs, as well as the ability to convey security requirements in a goal-oriented and effective manner.

• Work Style & Mindset:
  Structured, independent and precise working style. Communication skills on eye level with Tech, Management and Customers. A pragmatic design willingness that security is not managed but developed – paired with team orientation, reliability and sense of responsibility.

• Our Promise: At smapOne, you won't expect a security ivory tower, but real responsibility and scope for action. Here, smart structures, trust and a culture of effectiveness count.

Ready to shape information security effectively and with impact? Then apply now – we look forward to you!

Benefits

What do we offer?

• New Work live: Find your ideal work location and preferred working hours, plan your workation in the EU abroad after consultation and try out new ways of collaboration – camping, holiday apartment, café or home office are just some of many possibilities.
• Work at the pulse of time: Work with modern tools, methods and equipment in a challenging task field.
• New-Work-Budget: You're missing an additional screen, height-adjustable desk or office chair in your home office? Use your individual smapOne-equipment budget.
• Remote-first with Sense for Proximity and Flexibility: We will work completely remote, in the office or hybrid, so that it fits best for you.
• Lifelong Learning: 1:1 meetings for your personal further development,