IT Security and Risk Management Consultant (Remote)

Project overview

We are looking for an experienced consultant in the field of IT security and risk management for a remote project starting January 2027. The activity must be carried out from Germany.

Responsibilities

You will guide asset and application owners through structured information security and IT risk management processes. Your activities include the workshop-based development of security needs assessments, the execution of threat-based IT risk analyses and compliance checks in an assessment format, and the development of risk treatment plans. You will update existing risk management documentation and link technical, procedural, and functional vulnerabilities with potential business and monetary risks.

Requirements

The project requires a complete application with meaningful documents.

• At least 5 years of practical experience in IT security
• At least 3 years of demonstrable practical experience in IT risk management
• In-depth knowledge of ISO 27001 and ISO 27005 with at least 3 years of practical experience
• At least 5 years of audit or assessment experience
• Experience with the tool risk2value (GBTEC)
• At least 5 years of experience in IT risk identification and opportunity recognition
• Certifications such as ISO 27001 Lead Auditor, BSI Grundschutz Auditor, CISSP or T.I.S.P.
• Industry experience in the railway sector is an advantage

Project details

• Start: 01.01.2027
• Duration: 01.01.2027 - 31.12.2027
• Remote: onsite
• Location: DE
• Rate: 100-100 EUR/h
• Languages: German