Information Security Manager (m/f/d)

Design the future of animal insurance in Germany and Europe with us. With us (almost) everything is about dogs and cats – and about the people You love. For decades, we have been reliably insuring four-legged people against high veterinarian costs and also offering dogs with strong protection in case of liability damage. Our claim: need-oriented insurance rates, digital processes without detours and services that really help. As part of the Pinnacle Pet Group, we are shaping Europe's largest ecosystem for animal health with our employees. AGILA IT is responsible for the development, development and operation of all systems and core applications at AGILA. You want to be part of it? Then we look forward to your application!

You build the company-wide ISMS according to ISO 27001, operate and develop it continuously and independently control the ISMS roadmap incl. Guidelines, processes, control framework and demonstration You carry out protection, risk and gap analyses, moderate them and derive measures that you consistently follow You establish and advocate security policies, standards and work instructions in close coordination with IT governance and (IT)risk management You advise IT and specialist areas on security requirements and architecture and project projects according to the principle of “Security by Design” You prepare internal and external audits in the ISMS environment, accompany them and ensure the sustainable implementation of the results You control action and maturity tracking including Key figures, reporting and the first decision bases for management You sensitize and train employees, work closely with (IT)risk management, data protection, compliance, and external auditors, and identify, prioritize and implement action fields independently across areas to establish a sustainable security awareness culture

You bring multi-year experience in information security or ISMS environment with, ideally with responsibility for building or operating an ISMS You have a well-founded knowledge of common standards and frameworks (e.g. ISO 27001, BSI basic protection, NIST) and have experience with audits and demonstrations You have practice in risk analysis, policy development and action management in the IT and business context. You communicate safely with IT, departments and management, convince by moderation and enforcing ability, and promote topics in the company's own responsibility Experience in regulated environments (e.g. financial or insurance) is advantageous Relevant certifications (e.g. ISO 27001 Lead Implementer / Auditor, CISSP, CISM, BSI-IT-Grundschutz-Praktiker / Consultant) are desirable Very good knowledge of German and English in word and writing complete your profile

Safe workplace in a growing international environment Hybrid working model with real flexibility: After editing, you can work up to 3 days a week at Homeoffice Germany ticket restaurant checks for flexible use to go to dinner or shopping Training budget & individual development possibilities Hansefit & JobRad – stay fit and mobile 30 days holiday + 1 additional health day And the best thing: office dogs are welcome with us