Assistant Manager – Information Security (f/m/d)

LeanIX Jobs

As an Assistant Manager – Information Security at LeanIX, you will be responsible for carrying out risk management, auditing, and defensive security within LeanIX. You shall also be liaising with employees across the company and help with any Information Security related queries. The role involves plenty of learning opportunity for someone looking to grow within IT Risk / Corporate / Defensive Security domain.

Assistant Manager – Information Security (f/m/d)
Connected remote and based close to one of our offices in Amsterdam, Netherlands; Bonn, Munich or Berlin, Germany; Paris, France; London, United Kingdom or Ljubljana, Slovenia.

WHAT IS WAITING FOR YOU?

• Assist Information Security team with conducting internal audits based on internal control framework
• Coordinate ISO 27001, SOC 2, TISAX and Cyber Essentials Plus external audits
• Ensure relevant Information Security policies and procedures are kept updated as required
• Support training and awareness efforts within the company
• Assist in aspects related to defensive security such as antivirus, patching, SPAM filtering, content filtering, phishing prevention, etc.
• Follow-up with respective ISMS SPOCs on audit findings and support remediation
• Respond to RFPs and liaise with the Sales and Solution Engineering teams on security topics
• Liaise with relevant stakeholders and help in improvising existing processes
• Assist Information Security team with new projects and initiatives

WHAT ARE WE LOOKING FOR?

• Candidate must have 4+ years of hands-on experience in audit/ implementation of standards such as ISO 27001, SOC 2 TSPs, TISAX, NIST 800 series, Cyber Essentials scheme
• Knowledge of information security program and control processes and audit procedures
• Relevant Security Certifications are a plus e.g. CISA, CISSP, CISM, CCSK, ISO 27001 LI, ISO 27001 LA, etc.
• Ability to multi-task and manage stakeholder expectations
• A drive to learn and grow within the IT Risk / Corporate / Defensive Security domain
• Any experience in defensive security e.g. antivirus, patching, SPAM filtering, content filtering, phishing prevention is a plus
• Any experience in Web Application / Network penetration testing is a plus