IT System Specialist (m/f/d) - KRITIS and ISO 27001 Auditor (Ref. No.: 46300)

We are looking for an IT system specialist (m/f/d) for the implementation and support of KRITIS IT quality management audits. The focus is on the review and consultation on the implementation of security requirements according to ISO 27001 and legal requirements for critical infrastructures.

Key Facts
Start: 01.04.2026
Duration: Not known
Utilization: 100 %
Type of assignment:
Location: Berlin
Country of assignment: Germany

Your Tasks

• Review of the implementation and application of ISO 27001 and the requirements according to § 8a BSIG in ongoing IT operations

• Advice on the implementation of requirements from current KRITIS IT audits, taking into account the state of the art

• Technical support for the further development of IT security for prominent IT services

• Definition of responsibilities within the audit process

• Preparation, planning and execution of IT security audits and quality controls

• Integration of the audit results into the existing information security process

• Definition of the audit basis and development of a uniform evaluation scheme

• Creation of comprehensive audit programs and detailed audit plans

• Selection and coordination of a suitable audit team

• Conducting introductory talks and kick-off meetings

• Review and examination of relevant documents and evidence

• Determination of random samples and selection of suitable audit methods

• Development of flowcharts for on-site audits and their implementation

• Conducting interviews with the relevant specialist departments

• Review and evaluation of the risk treatment plan

• Evaluation of the audits and preparation of detailed audit reports

• Follow-up of the audits and initiation and support of follow-up measures

• Continuous monitoring and needs-based adaptation of the audit program

• Conducting final meetings with the stakeholders

• Identification and description of potential for improvement from an organizational and technical perspective

Must-have requirements

• At least 3 years of professional experience with comparable tasks such as audits and examinations

• Experience from at least three successfully completed projects or assignments with a focus on audit or examination

• Experience with IT security requirements according to ISO 27001

• Experience in the implementation of IT security specifications and processes as well as in project management

• Comprehensive understanding and practical experience in IT, taking into account the all-hazards approach (resilience requirements, availability aspects, integrity requirements and confidentiality issues)

• Knowledge of relevant laws and regulations such as the EU NIS Directive, NIS Directive Implementation Act, IT Security Act, BSI Act and BSI Kritis Ordinance

• Knowledge of the concretization of the requirements for the measures to be implemented in accordance with § 8a paragraph 1 and paragraph 1a BSIG

• Knowledge of the BSI IT baseline protection (compendium, 200 series)

• Very good German language skills in spoken and written form

• Assertive and goal-oriented appearance as well as confident and self-assured communication with stakeholders

• Pronounced problem analysis skills and conscientiousness in the development of concepts

• Confident and reliable appearance in a professional environment

Nice-to-have requirements

• Experience in cross-functional cooperation and interdisciplinary workflows

• Good English skills (proof of language level is an advantage)

Further information

The assignment can be performed remotely. Necessary on-site audit appointments will be arranged separately. The assignment is planned until the end of June with the option of extension until the end of the year.

Let’s power the future together
From the business case to implementation: As a leading consulting firm for strategic transformations, we are a trusted partner for our clients - and for our employees. Responsible, high-performing and always with the focus on people. #WeAreWavestone
With our 360° portfolio of consulting services, we combine first-class industry expertise with a broad range of cross-industry skills, work interdisciplinary and think outside the box. To our partner companies and freelancers: Freelancers we can thus offer comprehensive perspectives within our own projects and support as a long-standing framework agreement partner in the filling of project vacancies – promptly and directly.

We look forward to hearing from you!

Your direct contact at Wavestone
Elma Abdagic
Phone: +49 89 455 99 282
E-mail: Find Jobs in Germany on Arbeitnow