External Information Security Officer – Further Development of Information Security

Project overview

A public IT service provider is seeking an experienced external Information Security Officer (ISB) to strategically and operationally advance information security. The role involves consulting, supporting planning services, and overseeing key security processes.

Key Data:

Requirements

• Several years of experience as an Information Security Officer or in a comparable ISMS function.
• Proof of all the following qualifications: ISO/IEC 27001 Lead Auditor, NIS2 expert, ISO 9001:2015 based on DIN EN ISO 19001:2018, Data Protection Officer, audit procedure competence according to § 8a para. 3 BSIG, and Mastering Incident, Risk, and Crisis Manager.
• Sound knowledge in information security management, risk management, and relevant regulatory requirements.
• Willingness to undergo a security check (Ü2); this is required for deployed personnel and will be applied for after the award.
• Willingness to perform the required services predominantly on-site.

Nice to have

Register now as a consultant at consultingheads: 👉 https://app.consultingheads.com/kandidat/registrieren

• Experience in the public sector or with IT service providers.
• Practical experience with ISMS tools, especially Verinice.
• Experience in preparing security risks and measures in a target-group-oriented manner.

Project details

expected from 11/2026, after award

No fixed term; until the agreed upper limit is reached

Remote/On-Site: Hybrid; approximately two-thirds on-site in Brandenburg, one-third remote

Utilization: 100% on demand; estimated volume 700 PT (500 on-site, 200 remote), no minimum purchase

YOUR CHALLENGE

YOUR TALENTS

• Perform the function of the external Information Security Officer and provide expert advice to the client on information security.
• Plan, evaluate security requirements and measures, and support their implementation.
• Review and supplement existing security documentation and relevant entries in the ISMS tool Verinice.
• Systematically record, prioritize, and prepare risks and action needs in a target-group-oriented manner.
• Support the client in the further development of security processes and the implementation of regulatory requirements.
• Comprehensibly document results, recommendations, and open measures and coordinate them with relevant contact persons.
• Start: flexible
• Location: DE
• Languages: German

Source notes

consultingheads. When results matter. We connect you with the most impactful freelance consultants, IT & subject matter experts, and interim managers – personally selected, quickly available, and reliable in projects.

What We Do

Where pure algorithms reach their limits, our strength begins: personal consulting. We analyze your challenge together and find precisely the personality that fits you professionally and personally.

Our Network

With over 23,000 experts, one of the largest and most carefully selected in the DACH region, full of quality-assured consultants, specialists, and managers ready to lead your projects to success.

Our Approach

We combine the excellence of consulting with the flexibility and speed that modern companies need. Hand-picked, results-oriented, and always collaborative. Since 2016, leading companies, consultancies, and private equity firms have trusted us – in over 3,000 successful projects.