IT Security Consultant (m/w/d)

We at bitaggregat develop cyber security solutions (Hardware & Software) and support customers in structuring information security and implementing it in a verifiable manner.

In this role, you will primarily work on ISMS/ISO 27001 and NIS2 – with a focus on KRITIS-near environments (e.g. city utilities, public transportation, drinking water supply), but also at IT development and consulting companies.

You will lead customer projects independently – from analysis to implementation in everyday life. Special topics like Pentesting will be supported by our experts; you coordinate this and ensure that concrete improvements are made for the customer.
Important: We accompany until audit-readiness, conduct the audit ourselves but do not.

Aufgaben

• Risk analyses to be performed and documented in a comprehensible manner (including planning of measures)
• ISMS build/develop (ISO 27001): processes, guidelines, evidence, SoA/control implementation according to the customer's requirements
• NIS2 requirements translated into an executable roadmap (priorities, responsibilities, evidence guidance)
• Mitigation/support for implementation: recognized security risks reduced practically with the customer (e.g. organizational measures, technical foundation measures, clean task packages)
• Pentests coordinated (internally/partner), findings evaluated, measures followed up
• Begleitung until audit preparation (audit readiness established, documents/implementation checked, last gaps closed)
• Project management & customer communication: deadlines, status, next steps, clear protocols/results

Qualifikation

• Multiple years of experience in IT/IT-Security or IT-Governance – you can bring structure to customer environments
• Practical understanding of ISO 27001/ISMS (you know how to turn paper into a living implementation)
• Able to translate requirements (e.g. NIS2) into concrete work packages
• You work independently, communicate clearly and can moderate workshops/meetings securely
• Very good German, good English

Nice to have (not a must)

• Experience in KRITIS-near organizations or regulated environments
• Knowledge of topics like Logging/SIEM fundamentals, IAM/MFA, Backup/BCM, Vulnerability Management
• Certifications (ISO 27001, CISM, CISSP etc.)

Benefits

• Small, technical teams, short distances, quick decisions
• Flexible working hours: full-time desired, part-time problem-free possible, remote/hybrid self-evident
• Office in Leipzig (Goerdelering, directly at the main station)
• Variety from consulting projects and proximity to product development
• Travel component 0–10%, mainly Middle Germany region
• We offer flexible working hours and home office possibilities
• We give you opportunities for further education and development
• Beverages and team events are self-evident for us

If you're interested in really bringing KRITIS customers forward and leading projects to a clean audit-readiness, then contact us. Just send your resume – a brief profile will be enough. We look forward to getting to know you.

Find more English-speaking jobs in Germany on Arbeitnow