Project Manager (m/f/d) Supplier Management & ISMS / ISO 27001

Project overview

A leading regional energy and infrastructure company is seeking an external project manager to professionalize and further develop existing supplier management.

The goal of the mandate is to consistently align processes, governance structures, and proof documents with the requirements of an ISO/IEC 27001-certifiable Information Security Management System (ISMS) and to position them for the future.

Activities:

Profile:

Interested?

Send your application to:

Artur Krysztof

Senior Recruiting Manager

Tel.: *

E-mail: *@*.de

SOMI Experts GmbH

• Optimize risk management: Standardization and simplification of risk-based supplier assessment (including criteria, assessment cycles, and decision structures)
• Clarify responsibilities: Creation of a RACI matrix for clear role distribution between procurement, business units, legal, data protection, information security, and partner management (ISMS-compliant)
• Adapt contractual frameworks: Redesign and revision of contracts and security annexes (e.g., NDAs, AVVs, TOMs, and incident clauses)
• Establish escalation processes: Development of clear reporting channels and incident procedures for collaboration with suppliers
• Design lifecycle management: Implementation of consistent review, change, and offboarding processes for service providers in line with corporate standards
• Consolidate regulations: Consolidation of fragmented documents and lists into a uniform, holistic overall concept
• Project & Governance Experience: Many years of leading complex organizational and governance projects in multi-stakeholder environments (preferably in the corporate, energy, or infrastructure sector)
• Supplier & Risk Management: Deep expertise in strategic and operational supplier and partner management, based on ISO/IEC 27001 standards and risk-based approaches
• Process Design & Compliance: Proven ability in transforming complex assessment methods into lean, practical, and audit-proof target processes and work instructions
• Interface Network: Strong understanding of collaboration between procurement, IT security, legal, data protection, and business units
• Structure & Tracking: Confident in setting up clear role models (RACI), decision paths, and efficient management of extensive work packages
• Moderation & Decision Making: Experienced in moderating workshops and facilitating targeted approvals at management level
• Management Communication: Proficient in preparing decision documents, presentations, and practical templates tailored to the target audience
• Fluent German language skills

Project details

• Start: ab sofort
• Duration: 9 Monate
• Remote: remote
• Location: Darmstadt, Deutschland, DE
• Rate: 40-40 EUR/h
• Languages: German