Information Security Operations Specialist

About the role

We are seeking an Information Security Operations Specialist to strengthen our security posture and ensure continuous compliance with industry regulations. You will work closely with business and IT teams to embed security best practices across the organization.

Key responsibilities

• Support the implementation and continuous improvement of the Information Security Management System (ISMS).
• Ensure compliance with regulations and standards such as NIS2, EASA Part‑IS, ISO/IEC 27001 and PCI DSS.
• Conduct non‑technical security risk assessments and define mitigation measures.
• Perform non‑technical security reviews of suppliers, partners and new business initiatives.
• Assist internal and external audits, certifications and other compliance activities.
• Contribute to security incident management and risk reporting.
• Coordinate security awareness and training programmes across the company.
• Advise stakeholders on information security requirements and best practices.

Required profile

• Degree in Information Security, Computer Science, Business Informatics or a comparable field.
• Several years of experience in information security governance, ISMS, risk management or compliance.
• Strong knowledge of ISO/IEC 27001 and security governance practices.
• Experience with regulatory frameworks such as NIS2, GDPR, EASA Part‑IS or PCI DSS.
• Excellent communication and stakeholder‑management skills.
• Fluent English (C2) and German (C1/C2).
• Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer).

Required skills

• ISO/IEC 27001
• NIS2
• GDPR
• EASA Part‑IS
• PCI DSS
• Cloud security
• AI governance

What we offer

• Flexible working hours with hybrid work options.
• Vacation and Christmas bonuses.
• Mentoring programmes and special deals with selected partners.
• Employee events and a collaborative culture.