About the role
It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents. All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS! Tasks You have a strong interest in cyber security and believe the following to be applicable to you? As an Information Security Manager (m/w/d), located in Germany , you will lead our team of GRC or Incident Readiness consultants while actively contributing to client projects as well as contributing in pre-sales activities for strategic clients. Your role will be key in enhancing our clients’ cybersecurity posture by creating and driving security and resilience strategies and their programs throughout the company. Key responsibilities include, but are not limited to: Perform technical account management duties for specific top-tier, strategic clients; Leading and managing a team of GRC or Resilience consultants to deliver high-quality services to clients; Collaborating closely with clients to understand their business objectives, their risks and their unique security requirements; Assessing the security maturity or resilience maturity of clients (using of ISO, BSI or NIST standards) to identify gaps and areas for improvement; Developing and implementing a fit-for-purpose security program (that aligns with industry standards) or help the customers to develop and implement resilience programs (BCM and DRP programs); Driving the security program at clients, where you also act as the security champion, spreading the “gospel” on security; Conducting risk assessments, identifying potential vulnerabilities, and recommending risk mitigation strategies; Overseeing and supporting with the implementation of the security program, including policies, procedures, and controls; Or overseeing and supporting with the implementation of Business Continuity Management Systems and Disaster Recovery Programs. Providing updates to management on the ‘state of security’ at their company; Holding steering committees at the customer with relevant stakeholders to guide & adapt the security program, where needed; Involve yourself actively in the sales process by creating and presenting Statements of Work, project plans, requirements definitions,… for projects running in your team. Requirements You hold citizenship in one of the 32 NATO member states or the Austrian citizenship; Bachelor’s or Master's degree in Business Administration, Information Security, or a related field; Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), ISO27001 Implementer/Auditor or equivalent are strongly preferred; Proven experience in being a CI