Information Security Manager

JTL-Software runs e-commerce software that our customers run their businesses on. Customers, partners and stakeholders trust in JTL to secure their information.

This role runs JTLs information security management system end to end: the ISO/IEC 27001:2022 ISMS, the internal audit programme, the policy and standard framework, the cyber risk register, and security awareness across the company. The goal is to demonstrate, that JTL successfully has established processes to continuously improve its security capabilities.

This is a hands-on role in the security team without management responsibility.

ISMS ownership

Internal audit

Policy and standards

Risk management

External assurance

Awareness and training

• You have personally owned an ISO/IEC 27001 ISMS and defended it in front of an external auditor, through certification, recertification or surveillance. Only advising or having provided implementation guidance is not enough for this role.
• You have planned and run internal audits, written the findings, and driven them to closure
• You have written a policy and control framework and then operated an ISMS on it for at least a year
• You have run a risk register where real treatment and acceptance decisions were made
• technical literacy to look at control evidence from an engineer and tell whether it proves the control
• Fluent English, written and spoken

• Remote-first within Germany, with the option to work remotely from eligible countries for up to 180 days per year
• Meal allowance of up to €115 net per month
• Ergonomic workspace allowance for your home office setup
• Regular team events, company-wide gatherings, and summer and Christmas parties to stay connected as a remote-first company
• EGYM Wellpass and JobRad subsidy
• Financial benefits including capital-forming payments (Vermögenswirksame Leistungen) and a company pension scheme