Information Security Officer

I am currently supporting a global production and manufacturing organisation based in Stuttgart that is undergoing a significant digital transformation across its technology and security landscape.

As part of this transformation, the business is continuing to invest in and enhance its Information Security function, with a particular focus on NIS2, TISAX, Third-Party Risk Management (TPRM) and IT Vendor Management.

This role will work closely alongside the Group CISO and wider global security organisation, taking responsibility for helping to further build and develop this security vertical.

The role will include:

• Supporting the ongoing development and implementation of the organisation’s global Information Security strategy

• Driving security initiatives relating to NIS2 and TISAX, ensuring requirements are translated into practical controls and improvements

• Further developing Third-Party Risk Management and Vendor Security processes across the organisation

• Assessing security risks associated with suppliers, technology partners and other critical third parties

• Supporting internal and external audits, including the preparation of evidence, remediation activities and follow-up actions

• Working with technology, procurement, legal, risk and business stakeholders to embed security requirements throughout the vendor lifecycle

• Supporting the implementation and continuous improvement of security policies, controls, governance frameworks and processes

• Identifying security and compliance gaps and working with relevant teams to implement appropriate remediation measures

• Supporting the wider Group CISO organisation as the company continues its global digital and security transformation

Your background:

You will ideally have a strong background across Information Security, IT Risk, GRC, Third-Party Risk or Vendor Security, with practical experience implementing security and regulatory requirements rather than working purely from a policy perspective.

Experience with NIS2, TISAX, TPRM and Vendor Management will be particularly relevant. Previous exposure to manufacturing, production, automotive or another complex international environment would also be highly beneficial.

Location: Stuttgart – Hybrid working

Language: Fluent German required

English: Fluent English required

This is a great opportunity to work directly alongside a Group CISO and play an important role in shaping and strengthening Information Security capabilities across a global organisation undergoing significant transformation.