Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
This position is part of the IT Security, Compliance, Audit & Revision (SCAR) team, a governance function within Simon-Kucher’s global IT organization. The team is currently growing towards a target size of 15 professionals and is led by a dedicated IT Security Manager and Director.
Responsibilities
- Plan audits by analyzing Information Security standards, including ISO 27001:2022 and TISAX, defining audit scope, maintaining relevant audit catalogues, and drafting audit plans within the assigned area of responsibility.
- Perform audits in accordance with approved audit plans covering internal Simon-Kucher processes and assets, external service providers, IT systems, infrastructure, processes, and Information Security Management activities.
- Conduct on-site or virtual audits of physical security controls, including occasional travel to Simon-Kucher offices worldwide.
- Document and classify audit findings, enabling process owners, asset owners, and decision-makers to develop mitigation measures and implementation plans, while contributing to Simon-Kucher’s risk register and collaborating with IT Compliance colleagues and risk owners.
- Report to the Director of the IT Compliance Group, contribute to audit reporting for the CTO, and collaborate with IT Compliance colleagues and relevant stakeholders throughout the audit process, including involvement in certification audits.
Requirements
- University degree or formal education in informatics, business informatics, IT security, or a related field.
- At least four to five years of experience in a similar role within an international organization and global corporate environment.
- Relevant education, training, or professional development as an Auditor or Senior Auditor in Information Security, IT Security, or Cyber Security.
- Practical experience auditing against ISO 2700x standards, BSI Grundschutz, SOC 2 Type II, TISAX or similar Information Security and Information Security Management frameworks.
- Experience in planning audits, defining audit scopes, selecting appropriate audit methodologies, leading auditees through the audit process, and estimating the effort required for audit preparation, execution, documentation, and reporting.
- Experience in risk management and familiarity with risk management terminology and methodologies.
- Very good communication skills and the ability to guide stakeholders through the audit process in a clear and timely manner.
- Advanced proficiency in German and English (B1 level or higher).
- Strong initiative, self-starter mentality, analytical thinking, and solid organizational, time management, and result-driven working skills to operate effectively in a global environment.
- High ethical standards in auditing, including maintaining confidentiality, avoiding conflicts of interest, and conducting audits and reporting objectively and independently.
Skills
- Information Security standards
- ISO 27001:2022
- TISAX
- IT Security
- Cyber Security
- Risk Management
- Communication
- Stakeholder Management
- German
- English
- Organization
- Time Management
- Result-driven
- Professional Ethics
- Confidentiality
- Objectivity
- Independence
Location
- Germany - Berlin
- Germany - Bonn
- Germany - Cologne
- Germany - Frankfurt/Main
- Germany - Hamburg
- Germany - Munich
Work Type
- Flexible working
- Hybrid working
- Remote teaming
Experience Level
- Senior
Education Level
- University degree or formal education in informatics, business informatics, IT security, or a related field.
Benefits
- Competitive suite of health benefits
- Flexible and hybrid working
- Remote teaming
- Sabbaticals
- Paid time off
About the Company
- Simon Kucher is a global consultancy with more than 2,000 employees in 30+ countries. Our sole focus is on unlocking better growth that drives measurable revenue and profit for our clients. We achieve this by optimizing every lever of their commercial strategy – product, price, innovation, marketing, and sales – based on deep insights into what customers want and value. With nearly 40 years of experience in monetization topics of all kinds, we are regarded as the world's leading pricing and growth specialist. simon-kucher.com
- We believe in building a culture that embraces diversity, equity, and inclusion, creating an environment in which our people feel valued, are able to be themselves and feel their contribution matters. If we get that right, remarkable things will happen; people will grow faster, innovate, feel valued, and create better outcomes for everyone – our people, our clients and, of course, our business.
Equal Opportunity
- We believe in building a culture that embraces diversity, equity, and inclusion, creating an environment in which our people feel valued, are able to be themselves and feel their contribution matters.