ISMS Expert (f/m/d): Delos Cloud

About Delos Cloud:Delos Cloud, a start-up founded by SAP, strives to deliver a sovereign cloud platform for the digital transformation of the German public sector. The platform is an essential component for the implementation of the German Administrative Cloud Strategy (DVS) in compliance with all relevant data protection, IT security, and secrecy requirements of the BSI. Delos Cloud is a trusted partner of the federal, state, and local IT service providers and complements their service portfolio. Therefore, you will find exciting and varied tasks in an innovative and meaningful environment. For more information, please visit: www.deloscloud.de

As ISMS Expert (f/m/d) you will be part of the Delos Cloud Information Security Management (ISM) team.

At our company, security is part of our core brand, not just a cost center. With your experience, you will protect Germany's only sovereign Azure Cloud and make a valuable contribution to the digitization of our country.

If you want to use your expertise to join a competent team in analyzing a multifaceted attack surface and safeguarding it against a wide spectrum of advanced threats, apply to join us.

What you'll do:
The focus of your activities will be on the following tasks:

• Implementation, maintenance, and further development of the Information Security Management System (ISMS) according to IT-Grundschutz, BSI C5
• Ensuring compliance with legal and regulatory requirements
• Conducting risk analyses and assessments according to IT-Grundschutz

• Creating and monitoring information security policies and procedures

• Preparing for internal and external audits

• Creating documentation to evidence controls within the ISMS

• Collaborating with departments to identify and implement security measures

• Collaboration with external stakeholders e.g. from the state or federal states, Microsoft or SAP to strengthen Delos Clouds security and compliance posture

• Several years of related professional experience in the field of information security, ideally in a similar position

• Experience with common information security standards, e.g., ISO/IEC 27001

• Experience in conducting risk analyses and defining security measures

• Strong analytical skills and a structured work approach

• Excellent communication skills and teamwork abilities

• Optional certificates, e.g., (e.g., CISM, CISA, IT-Grundschutz Berater)

• Fluency in German and English - both written and spoken

• A flexible work environment that promotes a healthy balance between personal and professional life

• Excellent development opportunities

• Competitive salary and various employee discounts and vouchers

• Flexible working models such as working from home flexibility as well as time-off models

• Flexible mobility programs (e.g. company car policy, JobRad, etc.)

• In the office: free lunch, water, excellent coffee, and opportunities for outdoor sports activities

• Additionally: Company pension plan, share participation options, working time account, etc.

• Intense onboarding, incl. personal buddy