Senior Information Security Professional (f/m/d) (hybrid)

Title: Senior Information Security Professional (f/m/d) (hybrid) Location: Calea Floreasca 246c, 014476 Bucharest

As a member of the multinational security management team at IONOS , you will be working for one of Europe's largest hosters in the rapidly growing cloud sector, contributing your knowledge and experience to better protect our products and system landscape. You will be responsible for the design and operation of an integrated management system that includes certified areas from ISO 27001, KRITIS, NIS2, and is constantly being expanded. 
The aim is to encourage and control the implementation and operation of security mechanisms, not only to demonstrate that our products meet the security requirements of the standards, but also to increase the benefits for our customers and the company.
You will bridge ISO 27001 with emerging regulatory standards like NIS2 and KRITIS, ensuring our products maintain rock-solid compliance while enabling rapid innovation.

Tasks

• Functional Leadership & Steering: Functionally guide project teams, engineers, and junior security peers across certification and audit initiatives. Act as the primary technical lead for new and re-certification cycles.
• Integrated Management System (IMS) Competence: Architect and maintain our unified management system covering ISO 27001, KRITIS, NIS2 ensuring lean, synergy-driven processes across international cloud infrastructures.
• Continuous Compliance & Audit Execution: Lead the operational planning, execution, and follow-up of internal and external security audits. Move the organization toward continuous compliance using real-time security dashboards and modern GRC tooling.
• Regulatory & Certification Alignment: Align our certification frameworks with evolving regulatory requirements, including NIS2 and KRITIS standards.
• Reporting & Executive Interface: Design, compile, and present security metrics and certification status reports to senior management.
• Cross-Disciplinary Risk & Vendor Support: Support risk management, third-party risk assessments (TPRM), security awareness, and incident management disciplines across product lines.

Qualifications

• Background: Degree in Computer Science, Information Security, or equivalent practical experience in cloud/SaaS hosting environments.
• Certification & Framework Expertise: Proven track record in successfully leading ISO 27001 audits. Hands-on familiarity with GDPR, CSA CCM, and emerging standards (NIS2/KRITIS).
• Functional Leadership Capability: Demonstrated ability to lead cross-functional projects, mentor colleagues, and manage diverse stakeholders without direct authority.
• Tooling & Automation Mindset: Experience with modern GRC tools and automated evidence collection, reducing manual reporting overhead.
• Communication Skills: Fluent in German and English with strong analytical and executive reporting capabilities.

What we offer

• Access to local/international trainings, development and growth opportunities, including access to e-learning platforms, covering both technical and soft skills areas;
• Modern technologies, product responsibility;
• Flexible work schedule;
• Hybrid work option;
• Medical services package from one of two private providers;
• 25 vacation days per year;
• Substitute days off for public holidays that occur on the weekend;
• Meal tickets;
• Internal referral program;
• Team events, networking events organized to promote a passionate, creative and diverse culture;
• Summerfest and Winterfest parties;
• Of course, coffee, soft drinks and fresh fruits are on us in the office.

Diversity Enriches:

Different cultures, nationalities, genders, age groups, sexual orientations, and religions as well as people with disabilities - we encourage diversity. Because only teams that reflect all facets of society offer the best framework conditions for creativity and make a company productive and distinctive. We value diversity and welcome all applications.