Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Information Security Manager (m/w/d) Cloud role.
Rezi rewrites your resume against IONOS EN's job description. Free.
Tailor your resume to this Information Security Manager (m/w/d) Cloud role.
Rezi rewrites your resume against IONOS EN's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Information Security Manager (m/w/d) Cloud posting at IONOS EN — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Information Security Manager (m/w/d) Cloud posting at IONOS EN — free, in seconds.
About the Role
As an ISMS expert at IONOS, you will translate normative requirements into actionable policies, guide risk decisions, and steer the ongoing evolution of our security certifications. You will operate and advance our ISMS, manage the end-to-end risk lifecycle, and oversee the policy lifecycle. You will also plan and accompany audits, contribute to our certification roadmap, and act as the primary interface to various internal and external stakeholders.
Responsibilities
- Operate and advance our ISMS across core components: Scope, Control Catalog, Statement of Applicability, and Management Review.
- Manage the end-to-end risk lifecycle from identification and evaluation to treatment decisions, maintaining the central risk register with assigned ownership.
- Oversee the full policy lifecycle including drafting, reviewing, approving, communicating, and managing formal exception workflows.
- Plan and accompany internal and external audits, coordinating evidence collection, sampling reviews, and corrective action tracking.
- Contribute to our certification roadmap and prepare its expansion into further international target markets.
- Establish structured audit readiness routines across software development, IT operations, and corporate units.
- Act as the primary interface to Privacy, Legal, regulatory bodies, and incident response teams, managing regulatory notification obligations.
- Serve as a trusted advisor for internal teams, business leaders, and external auditors regarding security controls and compliance posture.
Requirements
- Combine strong risk methodology with an understanding of operational reality and articulate communication.
- Possess multiple years of practical experience with standardized information security management systems and cybersecurity attestations.
- Demonstrate proven audit and compliance experience in at least two certified domains (e.g., ISO/IEC 27001, BSI IT-Grundschutz, BSI C5, or PCI DSS).
- Proficient risk management methodology and the ability to translate technical concepts into sound business risk statements.
- Demonstrated composure and competence in facilitating external audit engagements and liaising with assessors.
- High editorial precision with the ability to draft clear, concise, and enforceable corporate policies.
- Experience partnering with technical engineering and cloud operations teams without imposing administrative bottlenecks.
- Strong facilitation and stakeholder management skills up to executive leadership.
- Business fluency in German (C2 level) and English (minimum C1 level) in both written and spoken communication.
- Familiarity with privacy information management frameworks (e.g., ISO 27701).
- Knowledge of European regulatory standards such as GDPR, NIS-2, or DORA.
- Experience with cross-framework control mapping and modern GRC automation tooling.
- Candidates must undergo a security check at the end of the application process.
Skills
- Risk methodology
- Information security management systems
- Cybersecurity attestations
- Audit and compliance
- Risk management
- Policy drafting
- Stakeholder management
- Facilitation
- German (C2)
- English (C1)
Location
- Hybrid
Work Type
- Hybrid working model
- Trust-based working hours
Experience Level
- Multiple years of practical experience
Benefits
- Hybrid working model
- Flexible working hours through trust-based working hours
- Subsidized canteen at some locations
- Various free drinks
- Modern office space with very good transport connections
- Various employee discounts for activities and products
- Employee events such as summer and winter parties, as well as workshops
- Numerous training and development opportunities
- Various health offers, such as sports and health courses
About the Company
- At IONOS, we don't just manage servers – we shape the digital future for more than 6.2 million customers worldwide with our solutions.
- As Europe's leading hosting provider and a pioneer in independent cloud solutions, we are building next-generation infrastructure – from sovereign cloud architectures and high-performance GPU clusters to integrated AI automation tools.
- What drives us is digital sovereignty for Europe and real impact for small and medium-sized businesses (SMBs) as well as large enterprises.
- We work in agile teams, rely on transparent structures, and believe that excellence and innovation only emerge through true team spirit.
Equal Opportunity
- We value diversity and welcome all applications – regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.