Manager Information Security

Information Security Expert The Opportunity If you've helped implement DORA and want a role where that experience shapes how an entire organisation manages risk, this is worth reading. Our client, a financial services organisation, wants someone to own and develop its information security framework. You'll sit between security risk and the wider business, which means your advice feeds directly into real decisions instead of sitting in a policy document. You'll also brief management on the organisation's security position, so the risks and priorities you identify are seen and acted on at the right level. The role is hybrid, with two to three days a week in the office and the rest working from home. The Role You'll take ownership of the policies, standards and procedures behind the organisation's ISMS, and keep developing them as the business and regulatory landscape change. The aim is controls that are effective and proportionate, so practical thinking is valued over box-ticking. Own and evolve security policies, standards and procedures within the ISMS Assess risk across business processes, applications and IT services, and recommend mitigation that matches the level of exposure Advise project teams and the business on security requirements when new services or technology changes are introduced Test how well existing controls work, identify weaknesses and drive remediation with the teams responsible Prepare evidence for internal and external audits and regulatory reviews Report to management on key risks, findings and improvement priorities Work with IT, risk, compliance and data protection colleagues on shared security topics Support awareness initiatives and contribute to post-incident reviews The Company Our client operates in financial services, where information security and regulatory compliance sit at the heart of the business. Security works hand in hand with IT, risk, compliance and data protection, which gives you visibility and influence well beyond a single team. What You'll Need Experience in information security, IT security or security risk management Strong knowledge of security governance and risk assessment, including control frameworks such as ISO 27001 Hands-on experience implementing DORA in a financial services environment Fluent written and spoken German How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.

ICT Third Party Risk Specialist The Opportunity Tired of sending supplier questionnaires and never seeing what happens next? In this role, you're the one who decides whether supplier risk is acceptable. An international group is strengthening its independent, second line oversight of technology suppliers. You'll be the specialist who challenges how outside providers are chosen, contracted, governed and replaced. Your work sits where cybersecurity, resilience and risk meet, so you get broad exposure and real influence rather than a narrow slice of one discipline. The scope is shaped around you. Early in your risk career? You'll get structure and room to build your cyber and digital resilience expertise on the job. Already an established specialist? You'll have the authority to set methodology and standards across the group. If you only match part of what's below, apply anyway. A partial fit is no barrier here. The Role Review assessments, due diligence, contract terms and mitigations, then make the call on whether the remaining supplier risk is acceptable. Advise the business across the full provider lifecycle, from selection to exit, and challenge decisions when they need challenging. Spot single points of failure, over-reliance on key providers and changes in provider risk, and escalate before they become problems. Join security reviews, cyber posture checks and inspections, and follow incidents through to resolution. Test the strength of exit and transition plans, and the testing behind them. Shape the group's methodology, minimum standards, governance and controls, plus the processes and tools behind them. Work with entities in other countries so standards are applied consistently, and push back where they slip. Turn your findings into KPIs, KRIs and reporting that give decision-makers a clear risk picture. The Company Our client is an international group investing in stronger oversight of its technology supply chain. You'll work with cross-functional colleagues in several countries, which means your judgement shapes how the whole group manages supplier risk, not just one local entity. What You'll Need Experience in ICT or operational risk, information security, supplier management, audit, compliance or resilience. Excellent written and spoken English. How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.

Chief Information Security Officer The Opportunity Most CISOs inherit a security agenda. Here, you write it. If you're a senior security leader who wants a genuine seat at the top table, rather than a function that gets consulted after decisions are made, this is worth a closer look. You'll be the most senior voice on cyber risk across a global group, reporting to the CIO and advising the executive team directly. The organisation is in the middle of an ambitious growth and change agenda, which means security here isn't a maintenance job. You'll shape how the group protects its most valuable assets as it grows, with the remit to make that strategy real. The Role You'll own security end to end, from long-term direction to day-to-day operations. Set the group's security strategy and turn it into a clear, prioritised plan the business can follow. Advise the executive team whenever cyber risk, a serious incident or a major investment decision is on the table. Lead security operations, so the organisation is ready to detect, contain and recover from attacks. Build the policies, controls and compliance processes that hold every part of the business to one consistent standard. Make sure new technology, change programmes and suppliers are secure from day one, not fixed after the fact. Grow an international team and build a culture where every employee takes ownership of security. Represent the organisation on security matters with clients, auditors and regulators. Because the business is changing, you won't be defending a static estate. You'll be designing security into what the group becomes next. The Company Our client is a global organisation operating across multiple countries, with an international security team and a leadership group that treats cyber risk as a top-level business issue. The CISO answers to the CIO and has direct access to the executive team, so your recommendations on risk, incidents and investment reach the people who make the final call. What You'll Need Experience leading a security function at senior level, as a CISO or equivalent. A track record of taking security programmes from strategy to delivery across multiple countries. Technical grounding in cloud, identity, security operations and supplier risk. Working knowledge of frameworks such as ISO 27001, NIST, NIS2 and GDPR. Fluent English and a willingness to travel. How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.

Director Information Security The Opportunity Tired of security being treated as an IT problem? Here, it isn't. This role sits outside IT and reports directly to the executive board. Your recommendations go straight to the people who make decisions, without being filtered through a technology function first. You'll be building, not inheriting. There's no existing team to restructure and no legacy operating model to unpick. You'll hire your own people, shape how they work, and set the standard for how security governance runs across the business. You'll also have a clear mandate. Owning NIS2 end to end gives you the board attention and cross-functional reach that many security leaders wait years for. The salary is €160,000–180,000. The Role You'll lead security across the group's corporate functions, working alongside the CISO and senior business leaders. You will: Be the go-to voice on security for the board and functional heads, and represent the corporate functions in governance forums. Own the NIS2 programme from roadmap and resourcing through to a sustainable operating model, so compliance becomes how the business works, not a one-off project. Define security ownership, escalation and reporting, so business teams know exactly what they're accountable for within group-wide standards. Track risks, audits and remediation, giving leadership a reliable view of exposure and control effectiveness. Strengthen incident, crisis and continuity readiness, alongside supplier security, access management and resilience. Connect the business with established central capabilities in security operations, identity management, architecture and penetration testing. Recruit and lead a dedicated team, supported by security champions embedded across the business. The Company Our client is a large, group-structured organisation operating within the scope of NIS2. It already has a mature central security function led by a CISO, which means you won't be fighting for basic tooling or operational capability. What it needs now is dedicated security leadership for its corporate functions, with the authority to make governance stick. This is a chance to define that role from day one and put your name on how it's done. What You'll Need 8+ years in information security, including leadership at director level. Experience advising board or C-level stakeholders on security. Fluent English. Willingness to work on site. How to Apply Interested? Get in touch with the MAM Gruppe team for a confidential conversation. Your CV doesn't need to be up to date. Send what you have, or just give us a call.