IT Security Auditor / Consultant Information Security (m/f/d) - 95% Remote

Project overview

For our client, we are looking for an experienced IT Security Auditor / Consultant (m/f/d) in the field of information security and ISMS, to support the preparation, execution, and follow-up of internal audits and selected service provider audits.

The focus is on the examination and further development of the Information Security Management System (ISMS), the assessment of existing security measures, and the identification of potential improvements based on BSI IT-Grundschutz and ISO/IEC 27001.

Responsibilities

• Independent preparation, planning, and methodological support of internal ISMS audits and selected service provider audits
• Creation and further development of structured audit plans, test schemes, and evaluation criteria
• Examination of existing information security processes and security measures based on BSI IT-Grundschutz, ISO/IEC 27001, and other relevant requirements
• Execution and support of audit interviews, as well as analysis and evaluation of audit evidence
• Review of central ISMS processes, particularly risk management, incident management, responsibilities, and management commitment
• Structured documentation of audit findings, deviations, and potential improvements
• Creation of meaningful, auditable audit reports and preparation of results for relevant stakeholders
• Consulting on the derivation of suitable measures to improve information security
• Technical coordination with internal departments and external service providers
• Practice-oriented knowledge transfer and support for employees in the further development of existing audit processes

Requirements

• Several years of professional experience in information security, IT auditing, or ISMS consulting
• Sound knowledge of BSI IT-Grundschutz and ISO/IEC 27001, as well as experience with the practical application of relevant security standards
• Demonstrable experience in the independent preparation, execution, and follow-up of internal information security audits
• Experience in creating structured audit reports, test schemes, and action recommendations
• Comprehensive knowledge of relevant ISMS processes, especially risk assessment, security incident management, and compliance
• Experience in evaluating security measures, audit evidence, and organizational security processes
• Knowledge in conducting service provider audits or third-party security assessments
• Ideally, certification as an ISO 27001 Lead Auditor, BSI IT-Grundschutz Auditor, or comparable qualification
• Strong analytical skills, structured working method, and confident demeanor with various stakeholders
• Very good German language skills, both written and spoken

Project details

• Start: 2026-11
• Duration: 13 Monate
• Remote: remote
• Location: Kassel, Deutschland, DE
• Languages: German