newboxes
newboxes
newboxes ajută organizațiile să gestioneze progresul tehnologic și schimbările organizaționale prin servicii de consultanță, software și expertiză operațională. Activitatea sa acoperă cercetarea și dezvoltarea, DevOps, dezvoltarea software, conformitatea produselor, ingineria agilă a sistemelor, serviciile IT și asistența post-vânzare. Lucrând alături de echipele clienților, compania contribuie la transformarea proiectelor complexe în îmbunătățiri practice prin consolidarea fluxurilor de lucru, sprijinirea livrării și identificarea oportunităților pentru o creștere mai mare, agilitate și reziliență organizațională.

Information Security & Compliance Manager at newboxes (Hybrid, Munich)

Lead ISO 27001, GDPR, and emerging AI compliance for newboxes’ cloud-native industrial platform. Work in a hybrid role with teams across Germany and India.

Descriere

  • Manage and continuously improve the ISO 27001-aligned ISMS, covering risk management, policies, and audits
  • Support preparation for further certifications, including BSI C5
  • Implement GDPR controls, including records of processing activities, data protection impact assessments, and data processing agreements
  • Develop and apply data classification and information protection frameworks
  • Handle customer security questionnaires and supplier audits
  • Convert compliance and security obligations into practical IT security requirements for architecture and development
  • Coordinate priorities and monitor implementation progress across the team
  • Work with interdisciplinary colleagues in Germany and India
  • Build the security and compliance foundations of the master.ing cloud-native platform

Cerințe

  • A university degree or comparable vocational qualification, combined with professional experience in information security, compliance, or IT
  • Some experience with ISMS, ISO 27001, or audits, preferably in software, industrial, or consulting settings
  • Foundational knowledge of GDPR and cloud security controls such as access management, encryption, and logging
  • Motivation to rapidly learn areas including NIS2, the Cyber Resilience Act, BSI C5, and evolving AI-system regulations
  • A careful, organized working style and determination to carry initiatives through
  • Confident communication with developers and customer CISOs
  • Fluent German and good English
  • Preferred: ISO 27001 Lead Implementer or Lead Auditor certification, CISM, CISSP, or CIPP/E, plus knowledge of export controls and security classification requirements

Beneficii

  • Work in a demanding environment at a growing company
  • Take on substantial autonomy and ownership
  • Access defined opportunities for professional growth
  • Collaborate with experienced specialists from the industry
  • Enjoy a modern workplace with an international perspective
  • Use a hybrid setup combining project-based onsite work with remote work

Locuri de muncă similare

General Dynamics Information Technology

Project Coordinator, Water Utility Projects

General Dynamics Information Technology

Coordinate cross-functional water utility projects for GDIT, keeping deliverables, budgets, and risks on track while engaging clients and community stakeholders. This remote U.S. role involves travel across the country 50%–75% of the time.

Deschide
S&P Global

Principal Commodity Analyst, Global Crops

S&P Global

Lead agricultural market research and forecasting for S&P Global Energy. Build commodity models, balance sheets, and reports that turn market developments into useful client insights.

Deschide