Information Security Officer

Information Security Officer Location: Hamburg Join an international organisation as Information Security Officer, supporting security governance, coordination, and organisational security initiatives across a complex environment. In this role, you will contribute to the development of security frameworks, support cross-functional projects, and help strengthen security processes and controls throughout the organisation. Key Responsibilities: Support the coordination and delivery of information security and governance initiatives. Contribute to the maintenance and continuous improvement of security frameworks, policies, and processes. Assist with audits, assessments, and regulatory or compliance-related activities. Monitor project activities, risks, and reporting requirements across security-related workstreams. Prepare reporting materials, dashboards, and documentation for internal stakeholders. Collaborate with business, IT, and governance functions on security-related topics. Support awareness, communication, and continuous improvement initiatives within the security environment. Your Profile: Several years of experience in information security, governance, compliance, or related project environments. Familiarity with recognised security frameworks and governance standards. Experience working with cross-functional stakeholders in complex organisations. Structured and analytical working style with strong coordination skills. Ability to communicate effectively with both technical and non-technical stakeholders. Strong organisational skills and proactive mindset. Fluent German and English skills. What’s on Offer? Broad security governance role within an international environment. Opportunity to contribute to organisation-wide security initiatives. Flexible hybrid working arrangements. Long-term professional development opportunities.

Senior Manager Information Security If your current cyber strategy work never gets past the slide deck stage, this one's different. You'll be the person clients call when the board wants to know what to actually do about cyber risk, not just what the risk is. The Opportunity You'll lead projects at the top decision-making level of major, household-name clients. That means building risk-based, business-led cyber strategies with executives, not just writing them up for someone else to present. You'll design target operating models, advise on regulatory pressure points like DORA, and run transformation programmes from target state through to operational rollout. The client work spans sectors: financial services, public sector, and industrial environments protecting connected production systems. You'll also help shape how the practice uses emerging tools like generative AI in live project work, so this isn't a role where the methodology stays static. The Role Develop risk-based, business-oriented cyber strategies directly with client executives Advise leadership on regulatory requirements and translate them into action Manage transformation programmes end to end, from governance model to implementation Build target operating models that improve how people, technology and process work together Own project delivery for executive-level client relationships Coach and develop the team working alongside you on each engagement The Company This is a leading global consultancy with a well-established cybersecurity practice, working with some of the largest organisations in the market. You'd be joining a team that's actively growing its footprint in strategy and transformation work, with the backing and reputation to get straight into the room with senior stakeholders rather than working your way up to it. What You'll Need 5+ years in cybersecurity management, with a focus on strategy, governance or transformation work for large enterprise clients Proven track record managing complex projects with senior, demanding stakeholders Solid knowledge of cybersecurity standards such as ISO 27001, IT-Grundschutz, NIST, ISF or DORA Fluent German and English, with strong communication and presentation skills at management and C-level Willingness to travel How To Apply Get in touch with the team at MAM Gruppe for a confidential conversation. Your CV doesn't need to be up to date, send what you have or just give us a call.

Senior Manager IAM If you're the one everyone calls when an IAM rollout goes sideways, but you're never the one who got to design it from scratch, this is worth a look. The Opportunity You'll own IAM and PAM projects end to end, from initial requirements through to go-live and ongoing operation. You're the subject matter expert in the room: governance, architecture, integration, and the customer's target vision all sit with you. This means working with international clients on real regulatory pressure, including MaRisk and BAIT/VAIT requirements, and being the central point of contact for governance, standards and compliance throughout. You'll also lead and coach the project teams around you, so this is as much about people as it is about systems. The Role Act as project manager across all phases, from initial requirements analysis through conception, implementation, go-live and operation Own governance, architecture and integration as the subject matter expert Adapt IAM tools to client requirements and act as central contact for governance, standards and regulations Help shape product and service development based on market needs Lead and coach project teams, fostering a collaborative way of working The Company This is a leading global consultancy with a well-established cybersecurity practice, advising international clients on identity and access management. You'd be joining a team with real scope to shape how IAM/PAM work gets delivered, rather than just executing someone else's design. What You'll Need 5+ years of professional experience in identity and access management Solid experience with regulatory requirements such as MaRisk and BAIT/VAIT in relation to IAM implementation In-depth knowledge of IAM processes, from design through to rollout Strong knowledge of IT security standards such as ISO 27001 and NIST Confident communication at all levels, with experience leading international, interdisciplinary teams Fluent German and English, and willingness to travel How To Apply Get in touch with the team at MAM Gruppe for a confidential conversation. Your CV doesn't need to be up to date, send what you have or just give us a call.

PAM Manager The Opportunity If you're running PAM projects for one client, imagine doing it for dozens. This role puts you at the centre of Privileged Access Management for major international clients, covering the full lifecycle from acquisition through to go live and operation. You'll shape how PAM gets designed and rolled out, not just maintain it. You'll also get room to grow: structured career planning, secondments, job rotation, and an internal training academy. Flexible and EU remote working, sabbaticals, and family support round out the package, along with bike and car leasing and a company phone for personal use. The Role You'll act as project manager across all phases of PAM engagements, from client acquisition to successful operation post go-live. As subject matter expert, you'll own governance, architecture and integration, translating each client's PAM target vision into a working solution. That includes customising tools like CyberArk and BeyondTrust, and acting as the go-to contact on governance and regulation. You'll also help shape the wider PAM offering and lead and coach a team as you go. The Company Our client is a globally established professional services and consulting firm with a large international cybersecurity practice, supporting clients through every stage of secure digital transformation. It's a business with genuine international reach and a strong, visible commitment to diversity and inclusion. What You'll Need At least 5 years' hands-on experience in Privileged Access Management Practical experience implementing and customising PAM solutions such as CyberArk or BeyondTrust Working knowledge of MaRisk and BAIT/VAIT regulatory frameworks Solid understanding of IT security standards such as ISO 27001 and NIST Experience leading or coaching a team internationally Fluent German and English How to Apply Your CV doesn't need to be up to date. Send what you have, or just give us a call.